Refactor viewmodels and enhance security documentation; remove unused viewmodels, add path sanitization, and implement rate limiting

go_cloud/internal/storage/nextcloud.go

@@ -17,16 +17,12 @@ func CreateNextcloudUser(nextcloudBaseURL, adminUser, adminPass, username, passw
 	baseURL := strings.Split(nextcloudBaseURL, "/remote.php")[0]
 	urlStr := fmt.Sprintf("%s/ocs/v1.php/cloud/users", baseURL)
 
-	fmt.Printf("[DEBUG-PASSWORD-FLOW] CreateNextcloudUser called with password: %s\n", password)
-
 	// OCS API expects form-encoded data with proper URL encoding
 	formData := url.Values{
 		"userid":   {username},
 		"password": {password},
 	}.Encode()
 
-	fmt.Printf("[DEBUG-PASSWORD-FLOW] Form data being sent to OCS API: %s\n", formData)
-
 	req, err := http.NewRequest("POST", urlStr, bytes.NewBufferString(formData))
 	if err != nil {
 		return fmt.Errorf("failed to create request: %w", err)
@@ -70,9 +66,6 @@ func NewUserWebDAVClient(nextcloudBaseURL, username, password string) *WebDAVCli
 	// Build the full WebDAV URL for this user
 	fullURL := fmt.Sprintf("%s/remote.php/dav/files/%s", baseURL, username)
 
-	fmt.Printf("[WEBDAV-USER] Input URL: %s, Base: %s, Full: %s, User: %s\n", nextcloudBaseURL, baseURL, fullURL, username)
-	fmt.Printf("[DEBUG-PASSWORD-FLOW] NewUserWebDAVClient called with password: %s\n", password)
-
 	return &WebDAVClient{
 		baseURL:    fullURL,
 		user:       username,