Commit Graph

10 Commits

Author SHA1 Message Date
jamesread c5f0387045 chore: coderabbit suggestions 2026-07-19 00:03:12 +01:00
jamesread 25b80e1460 fmt: Code style and linter 2026-07-18 22:46:05 +01:00
jamesread 422044317c security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
jamesread d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session 2026-03-04 23:31:15 +00:00
jamesread f044d90d55 security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow. 2026-03-01 23:52:25 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread e9d90060fd chore: oauth gocyclo 2025-12-25 08:35:09 +00:00
jamesread 7e1a38eb9e feat: add AddToUsergroup option to OAuth2 providers 2025-12-25 01:36:05 +00:00
jamesread 470f31db6e chore: Remove unecessary OAauth2 log 2025-11-27 00:41:53 +00:00
jamesread be7c754043 feat: Rebuild authentication system to support 3k authentication 2025-11-26 22:33:19 +00:00