littleshop/.claude/settings.local.json
SysAdmin 622bdcf111 🔒 SECURITY: Emergency fixes and hardening
EMERGENCY FIXES:
 DELETE MockSilverPayService.cs - removed fake payment system
 REMOVE mock service registration - no fake payments possible
 GENERATE new JWT secret - replaced hardcoded key
 FIX HttpClient disposal - proper resource management

SECURITY HARDENING:
 ADD production guards - prevent mock services in production
 CREATE environment configs - separate dev/prod settings
 ADD config validation - fail fast on misconfiguration

IMPACT:
- Mock payment system completely eliminated
- JWT authentication now uses secure keys
- Production deployment now validated on startup
- Resource leaks fixed in TeleBot currency API

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-22 05:45:49 +01:00

38 lines
1.3 KiB
JSON

{
"permissions": {
"allow": [
"WebSearch",
"Bash(curl:*)",
"Bash(cmd.exe /c \"cd /d C:\\Production\\Source\\LittleShop && git status\")",
"Bash(cmd.exe /c \"cd /d C:\\Production\\Source\\LittleShop && git add .\")",
"Bash(cmd.exe /c \"cd /d C:\\Production\\Source\\LittleShop && git add LittleShop/Models/PushSubscription.cs\")",
"Bash(cmd.exe /c \"cd /d C:\\Production\\Source\\LittleShop && git add LittleShop/DTOs/PushSubscriptionDto.cs\")",
"Bash(cmd.exe /c \"cd /d C:\\Production\\Source\\LittleShop && git add LittleShop/Services/IPushNotificationService.cs\")",
"Bash(dotnet run:*)",
"Bash(cmd.exe:*)",
"Read(//mnt/c/production/source/claudeenhancement/**)",
"Bash(netstat:*)",
"Read(//home/sysadmin/.config/claude/**)",
"Bash(claude --version)",
"Bash(cat:*)",
"Bash(timeout:*)",
"Bash(/mcp)",
"Read(//home/sysadmin/**)",
"Bash(claude mcp:*)",
"Read(//tmp/**)",
"Bash(chmod:*)",
"Bash(sshpass:*)",
"Bash(ssh:*)",
"Bash(git pull:*)",
"Bash(git branch:*)",
"Bash(git add:*)",
"Bash(git push:*)",
"Bash(tasklist)",
"Bash(findstr:*)",
"Read(//mnt/c/Production/Source/SilverLABS/SilverPAY/**)"
],
"deny": [],
"ask": []
},
"outputStyle": "enterprise-full-stack-developer"
}