 Matthew Meszaros
|
e668a2a36b
|
feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa
|
2026-09-19 08:18:35 +02:00 |
|
|
Matthew Meszaros
|
fc91d71492
|
feat: make google, apple and turnstile optional at boot
|
2026-07-20 09:56:17 +02:00 |
|
|
Matthew Meszaros
|
141bc54974
|
Add sample auth UI theme
|
2026-02-10 19:30:47 +01:00 |
|
|
Máté Mészáros (Laptop)
|
ea787554ae
|
Oidc Middleware & Tasks Service
|
2026-01-19 15:54:57 +01:00 |
|