Lucas Berger 40666e1cc5 fix(19): BL-04 keep context oidcIss/oidcSub null for local users (no fabricated identity sentinels)

2026-06-17 20:24:01 -04:00

..

auth

fix(19): BL-04 keep context oidcIss/oidcSub null for local users (no fabricated identity sentinels)

2026-06-17 20:24:01 -04:00

broker

refactor(18): IN-03 memoize household timezone per outbox drain cycle

2026-06-15 07:43:01 -04:00

db

feat(19-01): add local_credentials schema, 0003 migration, generate-secrets LOCAL_SESSION_SECRET, .dockerignore D-15

2026-06-17 16:17:04 -04:00

lib

feat(19-01): implement localSession JWT cookie helpers and assertLocalSessionSecretSet boot guard

2026-06-17 16:14:48 -04:00

routes

fix(19): CR-04 scope login lockout to username, add TTL auto-expiry + admin-reset unlock

2026-06-17 20:20:43 -04:00

index.ts

fix(19): BL-03 reject OIDC-link bind on empty iss/sub or mismatched local session (takeover guard)

2026-06-17 20:22:37 -04:00