Linus Rath e055ee8201 fix: verify credentials upstream before minting identity cookies (GHSA-wxcm-j4jc-9fxq)

2026-09-17 20:48:42 +02:00

..

active-account-slot.ts

fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

crypto.ts

fix: bind a purpose into encrypted payloads (GHSA-cqqx-mjcf-mh55)

2026-09-17 20:16:51 +02:00

pair-reauth.ts

fix: bind a purpose into encrypted payloads (GHSA-cqqx-mjcf-mh55)

2026-09-17 20:16:51 +02:00

pairing-store.ts

feat: add QR code device pairing for mobile app login

2026-06-05 17:41:55 +02:00

session-cookie.ts

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

session-secret.ts

feat: add sessionSecretFile and oauthClientSecretFile for JSON config

2026-05-31 00:14:38 +02:00

verify-jmap-auth.ts

fix: verify credentials upstream before minting identity cookies (GHSA-wxcm-j4jc-9fxq)

2026-09-17 20:48:42 +02:00