jamesread
25b80e1460
fmt: Code style and linter
2026-07-18 22:46:05 +01:00
jamesread
422044317c
security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
...
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
jamesread
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
jamesread
f044d90d55
security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow.
2026-03-01 23:52:25 +00:00
jamesread
03da2ff2e7
security: Try to set cookies secure, with force override option
2026-02-26 23:43:50 +00:00
jamesread
e9d90060fd
chore: oauth gocyclo
2025-12-25 08:35:09 +00:00
jamesread
7e1a38eb9e
feat: add AddToUsergroup option to OAuth2 providers
2025-12-25 01:36:05 +00:00
jamesread
470f31db6e
chore: Remove unecessary OAauth2 log
2025-11-27 00:41:53 +00:00
jamesread
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00