Adam Moussa c887d6d9d8 fix(security): remove hardcoded secrets from source ... Replace all hardcoded credentials with configuration-injected values: - SQL Server connection strings -> ${CONNECTION_STRING} env-var placeholders (4 appsettings files) - SendGrid API keys -> ${SENDGRID_API_KEY} (incl. commented copies in SendMessage.cs) - JWT signing secret -> ${JWT_SECRET} (3 appsettings files) - AWS access key pair in UploadFileHp.cs -> DI-injected IAmazonS3 (SDK default credential chain) - Google Maps API keys in App.razor / Home.razor -> IConfiguration lookup - Legacy SMTP credentials in SendMessage.cs comments -> placeholders Add .env.example documenting required environment variables and a Configuration & Secrets section in BACKEND_ARCHITECTURE.md. All exposed credentials were rotated 2026-06-05 prior to this scrub. Source: github-audit-report.md Criticals 1-2 (Agent A4). Verified: dotnet build 0 errors; secret-pattern grep clean.		2026-06-05 11:56:54 -04:00
..
Account	fixing forgot password issue	2024-10-08 07:36:59 -05:00
Layout	Initial commit	2024-09-28 14:58:36 -04:00
Pages	fix(security): remove hardcoded secrets from source	2026-06-05 11:56:54 -04:00
_Imports.razor	Initial commit	2024-09-28 14:58:36 -04:00
App.razor	fix(security): remove hardcoded secrets from source	2026-06-05 11:56:54 -04:00
Routes.razor	Initial commit	2024-09-28 14:58:36 -04:00