harden: token correctness, ceremony integrity, query scrub (E3/E4/E7) #11

Merged

PerishFire merged 1 commit from e347 into main 2026-07-17 07:57:13 +00:00

Conversation 0 Commits 1 Files changed 4 +242 -46

PerishFire commented 2026-07-17 07:54:32 +00:00

Owner

Copy link

No description provided.

PerishFire added 1 commit 2026-07-17 07:54:32 +00:00

harden: token correctness, ceremony integrity, query scrub (E3/E4/E7) ... 8696f7f7ab

E3: configurable https issuer, SameSite/Secure cookies, Cache-Control
no-store, openid-scope required, nonce echo, kind claim + scope-gated
userinfo, percent-encoded https/loopback redirects. E4: atomic invite
CAS, one2one Pass, empty-password reject, recovery re-floor (burn all
codes + end all sessions). E7: scrub interpolated query values. Acts
carry the adversarial cases.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

PerishFire merged commit 3180a3e737 into main 2026-07-17 07:57:13 +00:00

PerishFire deleted branch e347 2026-07-17 07:57:13 +00:00

PerishFire referenced this pull request from a commit 2026-07-17 07:57:15 +00:00

harden: token correctness, ceremony integrity, query scrub (E3/E4/E7) (#11)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

PerishLab/ensign!11

No description provided.