0b2a5995ff
chore: coderabbit knows better than me
2026-07-29 01:25:44 +01:00
7ecc7791d8
chore: golangci-lint fixes
2026-07-29 00:30:57 +01:00
e013ec0f88
chore: all HTTP requests now come with a context, timeout, etc.
2026-07-28 23:08:20 +01:00
a1f03e7d33
chore: fieldalignment across code base to reduce memory usage
2026-07-28 22:26:51 +01:00
c5f0387045
chore: coderabbit suggestions
2026-07-19 00:03:12 +01:00
25b80e1460
fmt: Code style and linter
2026-07-18 22:46:05 +01:00
422044317c
security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
...
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
f044d90d55
security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow.
2026-03-01 23:52:25 +00:00
03da2ff2e7
security: Try to set cookies secure, with force override option
2026-02-26 23:43:50 +00:00
e9d90060fd
chore: oauth gocyclo
2025-12-25 08:35:09 +00:00
7e1a38eb9e
feat: add AddToUsergroup option to OAuth2 providers
2025-12-25 01:36:05 +00:00
470f31db6e
chore: Remove unecessary OAauth2 log
2025-11-27 00:41:53 +00:00
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
jamesread