Commit Graph
7 Commits
Author SHA1 Message Date
root 7a5603b495 Portal decision B: client portal on my.debtrecoveryexperts.com
- DRE_BASE_URL -> https://my.debtrecoveryexperts.com (magic links, team notify)
- CORS allow_origins adds https://my.debtrecoveryexperts.com
- magic-link path /portal/verify -> /verify (client portal is domain root, not a subpath)
2026-08-21 18:50:05 -04:00
root be0750d001 DRE customer portal: FastAPI + SQLite backend (18 endpoints)
- Magic-link auth (sha256-only token storage, 15-min single-use, 7-day sessions)
- Staff-key auth via X-DRE-Staff-Key (constant-time compare)
- SQLite WAL, foreign_keys, parameterized queries, atomic DRE/CLT sequence allocation
- Intake validator rejects SSN/PAN patterns (FDCPA/TDCPA compliance)
- Document upload allowlist + magic-byte check, 20MB cap
- Unified error envelope, money as integer cents
- systemd unit (port 8093, User=root, hardening directives)
- Fixes import bug (auth.py relative imports) and audit_log placeholder mismatch
2026-08-21 18:43:33 -04:00
root c573ed1a14 chore: add .gitignore and project scaffolding 2026-08-08 13:06:04 -04:00
root 50153997f9 Add DRE functionality gap audit — static HTML shells, zero backend. Prioritized 4-tier punch list. 2026-07-25 16:58:34 -04:00
root 76a2849dfe Fix Caddy routing: portal now serves capabilities/, internal added. Claim submission page live at portal.debtrecoveryexperts.com/ 2026-07-25 16:55:23 -04:00
root da0acaa202 Update 2026-07-15 — root 2026-07-15 17:52:58 -04:00
root 748920470f Initial commit — 2026-07-15 2026-07-15 17:32:00 -04:00