UNOMI-875: PR4 security and tenant hardening (941/942/938)#809

Merged

sergehuber merged 9 commits into

UNOMI-875-pr4-security-tenant

Jul 6, 2026

Commits on Jul 5, 2026

UNOMI-941: Harden security service thread-safety and tenant authorization
sergehuber
committed
UNOMI-942: Fix tenant quota counts and TenantService error contracts
sergehuber
committed
UNOMI-938: Hash API keys at rest and harden TenantService
sergehuber
committed
UNOMI-938: Replace ApiKeyHashService with SecretHashService and drop legacy keys
sergehuber
committed
UNOMI-938: Use fast test hash stub in shared TestTenantService harness
sergehuber
committed
UNOMI-938: Use SHA-256 for API key verify instead of per-request PBKDF2
sergehuber
committed
UNOMI-938: Simplify SecretHashService to SHA-256 hash/verify only
sergehuber
committed
UNOMI-938: Trim SecretHashService to hash/verify; localize ApiKey helpers
sergehuber
committed

Commits on Jul 6, 2026

UNOMI-941/942: Fix request-subject restore and tenant quota error handling
sergehuber
committed