harden: bind refresh to client, persist scope, gate barred owners (E2) #10

Merged

PerishFire merged 1 commit from e2 into main 2026-07-17 07:33:22 +00:00

Conversation 0 Commits 1 Files changed 4 +106 -14

PerishFire commented 2026-07-17 07:30:46 +00:00

Owner

Copy link

No description provided.

PerishFire added 1 commit 2026-07-17 07:30:46 +00:00

harden: bind refresh to client, persist scope, gate barred owners (E2) ... 37e766597a

Refresh now binds to the issuing client (slug), refuses a mismatched or
missing client_id, checks the owner is not barred and the client still
exists, preserves the granted scope (no widening), and rotates via a
live-row CAS. Closes the red-team fix-first: a stolen refresh token no
longer outlives barring, client deletion, or rotation.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

PerishFire merged commit 178c845196 into main 2026-07-17 07:33:22 +00:00

PerishFire deleted branch e2 2026-07-17 07:33:22 +00:00

PerishFire referenced this pull request from a commit 2026-07-17 07:33:23 +00:00

harden: bind refresh to client, persist scope, gate barred owners (E2) (#10)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

PerishLab/ensign!10

No description provided.