React & FastAPI Gateway
Vite Client · FastAPI Service · JWT Authentication
- IDOR Protection: Strict user-ownership validation on all forensic jobs and static file delivery
- Zero-Trust Authentication: Mandatory Email OTP verification, Bcrypt password hashing, and stateless JWT sessions
- Secure Media Delivery: Public static access is strictly disabled; media access requires bearer tokens
- Application Hardening: Enforced HTTP security headers including HSTS, CSP, and API rate limiting
