2 Commits

Author	SHA1	Message	Date
Knee Cola	844e386e18	refactor: use combined shareId (locationId + checksum) in URL ... Changes: - Add generateShareId() and extractShareId() helpers - Share URLs now use single parameter: /share/location/{shareId} - shareId = locationId (24 chars) + checksum (16 chars) = 40 chars total - Update validateShareAccess() to extract locationId from shareId - Update uploadProofOfPayment() to accept combined shareId - Update LocationViewPage to validate and extract locationId from shareId Benefits: - Simpler URL structure (one parameter instead of two) - Checksum extraction by length (deterministic, no parsing needed) - Same security properties (HMAC-SHA256 validation) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2025-12-08 00:22:59 +01:00
Knee Cola	a6ab35a959	feat: add core security utilities for checksum-based share links ... - Add HMAC-SHA256 checksum generation and validation (shareChecksum.ts) - Add PDF magic bytes validation to prevent file spoofing (pdfValidator.ts) - Add IP-based rate limiting for upload abuse prevention (uploadRateLimiter.ts) - Update BillingLocation interface with shareTTL and shareFirstVisitedAt fields - Add environment variables for share link security and TTL configuration 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2025-12-08 00:14:20 +01:00