Lucas Berger 71537601ce fix(19): BL-03 reject OIDC-link bind on empty iss/sub or mismatched local session (takeover guard)

2026-06-17 20:22:37 -04:00

..

auth

fix(19): BL-02 match Secure attribute on logout cookie deletion to issue-time logic

2026-06-17 20:21:51 -04:00

broker

refactor(18): IN-03 memoize household timezone per outbox drain cycle

2026-06-15 07:43:01 -04:00

db

feat(19-01): add local_credentials schema, 0003 migration, generate-secrets LOCAL_SESSION_SECRET, .dockerignore D-15

2026-06-17 16:17:04 -04:00

lib

feat(19-01): implement localSession JWT cookie helpers and assertLocalSessionSecretSet boot guard

2026-06-17 16:14:48 -04:00

routes

fix(19): CR-04 scope login lockout to username, add TTL auto-expiry + admin-reset unlock

2026-06-17 20:20:43 -04:00

index.ts

fix(19): BL-03 reject OIDC-link bind on empty iss/sub or mismatched local session (takeover guard)

2026-06-17 20:22:37 -04:00