Commit Graph

15 Commits

Author SHA1 Message Date
jamesread 7ecc7791d8 chore: golangci-lint fixes 2026-07-29 00:30:57 +01:00
jamesread e013ec0f88 chore: all HTTP requests now come with a context, timeout, etc. 2026-07-28 23:08:20 +01:00
jamesread a1f03e7d33 chore: fieldalignment across code base to reduce memory usage 2026-07-28 22:26:51 +01:00
jamesread c5f0387045 chore: coderabbit suggestions 2026-07-19 00:03:12 +01:00
jamesread 25b80e1460 fmt: Code style and linter 2026-07-18 22:46:05 +01:00
jamesread 422044317c security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
jamesread d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session 2026-03-04 23:31:15 +00:00
jamesread f044d90d55 security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow. 2026-03-01 23:52:25 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread e9d90060fd chore: oauth gocyclo 2025-12-25 08:35:09 +00:00
jamesread 7e1a38eb9e feat: add AddToUsergroup option to OAuth2 providers 2025-12-25 01:36:05 +00:00
jamesread 470f31db6e chore: Remove unecessary OAauth2 log 2025-11-27 00:41:53 +00:00
jamesread 7f1e509e12 chore: Little fixes for OAuth2 login 2025-11-26 23:28:29 +00:00
jamesread e9bde8b094 fix: OAuth2 scopes for GitHub 2025-11-26 23:07:55 +00:00
jamesread be7c754043 feat: Rebuild authentication system to support 3k authentication 2025-11-26 22:33:19 +00:00