OpenEdCore v2.0.1 — Architectural Rebrand & Enterprise Security Hardening

[rajeshm20]

This release marks the official rebranding of the backend platform from StudentAppBackend to OpenEdCore (openedschool.com), establishing clean domain alignment across the repository, container registry, and infrastructure pipelines. In addition to the rebrand, v2.1.0 consolidates major authentication security enhancements, automated CI/CD gating, and multi-cloud deployment automation.

---

🚀 Key Highlights & Changes

1. Platform & Architectural Rebranding to OpenEdCore

• Swift Package & Target Names: Renamed SPM package, executable target, and test suite to OpenEdCore and OpenEdCoreTests.
• Clean Source Hierarchy: Relocated source trees to Sources/OpenEdCore and test suites to Tests/OpenEdCoreTests.
• Container Registry Alignment: Published images transitioned to ghcr.io/rajeshm20/openedcore.
• Docker & Compose: Updated Dockerfile, docker-compose.yml, docker-compose.package.yml, and docker-compose.caddy.yml to target openedcore:latest.
• Documentation Modernization: Comprehensive revisions across README.md and CONTRIBUTING.md.

2. Authentication & Enterprise Security Hardening (#54, #55, #56)

• Refresh Token Rotation (RTR): Implemented cryptographic single-use token rotation with automatic replay/reuse detection and token family revocation.
• Hardened Password Reset Flow: OTP codes and session tokens are now securely hashed via SHA-256 HMAC before database persistence.
• Transactional Password Reset: Password updates and concurrent reset requests are coordinated transactionally, automatically revoking all active student sessions.
• Security Headers & HSTS: Enforced strict transport security (HSTS 30-day default with preload readiness) and security middleware headers.

3. CI/CD & Cloud Deployment Automation

• Isolated SPM Caching: Transitioned GitHub Actions caching to openedcore-spm-*, caching package checkouts without storing stale precompiled header (PCH) objects.
• Render Continuous Deployment: Automated deployment pipeline targeting Render with pinned GHCR image digests and rollback tracking.
• Render Resilience: Added automated service base-image detection and retry logic in scripts/deploy-render.py.
• Container Hardening: Multi-stage Linux builds using swift:6.0-noble and ubuntu:noble with jemalloc memory allocation and non-root execution.

4. Verification & Test Suite

• 146 Integration & Unit Tests: Full test suite passing across in-memory SQLite and PostgreSQL 16 databases.

---

📦 Docker Image

docker pull ghcr.io/rajeshm20/openedcore:v2.1.0
docker pull ghcr.io/rajeshm20/openedcore:latest


<hr /><em>This discussion was created from the release <a href='https://github.com/rajeshm20/OpenEdCore/releases/tag/v2.0.1'>OpenEdCore v2.0.1 — Architectural Rebrand & Enterprise Security Hardening</a>.</em>