Roland Tannous 42a08e579c Use PBKDF2 for API key hashing per CodeQL recommendation ... HMAC-SHA256 was still flagged by py/weak-sensitive-data-hashing. Switch to hashlib.pbkdf2_hmac, which is in CodeQL's recommended allowlist (Argon2/scrypt/bcrypt/PBKDF2). Persistent server-side salt stays in app_secrets for defense-in-depth. 100k iterations to match auth/hashing.py's password hasher.		2026-04-13 16:02:52 +04:00
..
.gitkeep	root studio folder	2026-02-02 09:13:49 +00:00
__init__.py	fix: remove old comments (#4292)	2026-03-14 16:50:13 +04:00
authentication.py	Studio: add API key authentication for programmatic access	2026-04-10 13:33:14 +00:00
hashing.py	Final cleanup	2026-03-12 18:28:04 +00:00
storage.py	Use PBKDF2 for API key hashing per CodeQL recommendation	2026-04-13 16:02:52 +04:00