422044317c
security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
...
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
6bd8c1e838
chore: allow case insensitive bearer
2026-05-21 23:12:49 +01:00
246e33d565
feat: API Key (bearer) auth
2026-05-21 22:59:12 +01:00
32c7fd73b8
Merge commit from fork
...
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 18:36:22 -05:00
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
e97d8ecbd8
security: GHSA-g962-2j28-3cg9 (HIGH) JWT Audience Validation Bypass in Local Key and HMAC Modes
2026-03-04 23:13:39 +00:00
f044d90d55
security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow.
2026-03-01 23:52:25 +00:00
aa2bd95ccb
feat(policy): add policy to show/hide version number
...
Made-with: Cursor
2026-02-27 21:26:55 +00:00
03da2ff2e7
security: Try to set cookies secure, with force override option
2026-02-26 23:43:50 +00:00
e9d90060fd
chore: oauth gocyclo
2025-12-25 08:35:09 +00:00
7e1a38eb9e
feat: add AddToUsergroup option to OAuth2 providers
2025-12-25 01:36:05 +00:00
470f31db6e
chore: Remove unecessary OAauth2 log
2025-11-27 00:41:53 +00:00
7f1e509e12
chore: Little fixes for OAuth2 login
2025-11-26 23:28:29 +00:00
e9bde8b094
fix: OAuth2 scopes for GitHub
2025-11-26 23:07:55 +00:00
853972384c
security: Possible to kill actions without authentication & credential leak in logs
2025-11-26 23:07:25 +00:00
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
e6a02ac614
chore: fix various cyclo checks
2025-10-30 15:25:57 +00:00
c3d5da1981
chore: reduce cyclo complexity in service
2025-10-30 12:52:58 +00:00
0dd9e9b2b7
fix: guard against nil session storage
2025-10-25 00:22:28 +01:00
aa8322c354
fix: guard against nil session storage
2025-10-25 00:20:56 +01:00
3b8bc49b04
feat: Fixed session management and ripped out the rest of gRPC
2025-10-24 23:48:48 +01:00
jamesread