🦆 UpDuck Core Service

The secure integration spine for all UpDuck apps. It manages tenants, products, sync events, and internal APIs.

Total Tenants

Total Products

Completed Syncs

Failed syncs: 0

Security Model

Admin access uses Argon2id password hashing, secure cookies, and session hardening.
API calls require short-lived (15 min) JWTs signed by a server secret.
Each request is rate-limited, logged, and audited.
Cross-tool syncs and webhooks are queued with verification and retry.
All endpoints enforce HSTS, CSP, and anti-clickjacking headers.