Release v0.2.0 - Security and integrity features

- Add REST API response signing using HMAC-SHA256
- Add SHA256 hash validation for version file uploads
- Add ResponseSigner class for automatic API response signing
- Add file_hash column to database schema
- Remove external URL support from version uploads
- Update translations with all fuzzy strings resolved

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-01-22 16:57:54 +01:00
parent 8420734f37
commit 23bbc24c5f
14 changed files with 789 additions and 75 deletions

View File

@@ -6,7 +6,7 @@
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: WooCommerce Licensed Product 0.1.0\n"
"Project-Id-Version: WooCommerce Licensed Product 0.2.0\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2026-01-22 11:52+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
@@ -1408,3 +1408,25 @@ msgstr ""
#: src/Product/LicensedProductType.php:162
msgid "No"
msgstr ""
#: src/Admin/VersionAdminController.php:101
msgid "SHA256 Hash"
msgstr ""
#: src/Admin/VersionAdminController.php:103
msgid "Enter SHA256 checksum..."
msgstr ""
#: src/Admin/VersionAdminController.php:104
msgid "SHA256 checksum of the uploaded file (optional but recommended for integrity verification)."
msgstr ""
#: src/Product/VersionManager.php:67
msgid "Attachment file not found."
msgstr ""
#. translators: 1: provided hash, 2: calculated hash
#: src/Product/VersionManager.php:73
#, php-format
msgid "File checksum does not match. Expected: %1$s, Got: %2$s"
msgstr ""