Skip to content

feat(security): OAuth CSRF nonce + redirect allowlist [needs user_id review] (#11)#24

Merged
ianpatrickhines merged 3 commits into
mainfrom
claude/issue-11-oauth-csrf-redirect-allowlist
Jun 22, 2026
Merged

feat(security): OAuth CSRF nonce + redirect allowlist [needs user_id review] (#11)#24
ianpatrickhines merged 3 commits into
mainfrom
claude/issue-11-oauth-csrf-redirect-allowlist

harden(oauth-init): never trust caller-supplied user_id (session-fixa…

34a5cfb
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar