Thomas Durieux
|
eb4fbb6b15
|
Merge commit 'refs/security-review/pr849' into HEAD
# Conflicts:
# src/server/service/review-consent-http.ts
|
2026-10-08 16:26:12 +00:00 |
|
Thomas Durieux
|
7fc0a79a7a
|
Merge commit 'refs/security-review/pr848' into HEAD
|
2026-10-08 16:25:33 +00:00 |
|
Thomas Durieux
|
89d7a92072
|
Merge commit 'refs/security-review/pr847' into HEAD
|
2026-10-08 16:25:33 +00:00 |
|
Thomas Durieux
|
c24f6d4e94
|
Revalidate consent sessions after request body upload
|
2026-10-08 16:24:40 +00:00 |
|
Thomas Durieux
|
d3a8b4a8a7
|
Return artifact consent through registered POST callbacks
|
2026-09-27 15:59:36 +00:00 |
|
Thomas Durieux
|
7fe60a89aa
|
Add scoped completion exchange service transport
|
2026-09-27 15:18:49 +00:00 |
|
Thomas Durieux
|
d909bf281b
|
Exchange owner consent codes for immutable pending bindings
|
2026-09-27 15:06:14 +00:00 |
|
Thomas Durieux
|
7b60979c96
|
Protect artifact consent HTTP requests with current sessions and CSRF
|
2026-09-27 14:36:46 +00:00 |
|
Thomas Durieux
|
5485f57e02
|
Retain session-bound artifact owner consent under current authority
|
2026-09-27 14:16:57 +00:00 |
|
Thomas Durieux
|
b776ff7e5a
|
Add bounded authenticated review intent HTTPS consumer
|
2026-09-27 13:50:20 +00:00 |
|
Thomas Durieux
|
83e8d45192
|
fix: close rejected artifact service requests before body draining
|
2026-09-27 13:13:04 +00:00 |
|
Thomas Durieux
|
eaa84e3af5
|
Add optional authenticated review-service capabilities endpoint
|
2026-09-27 12:51:28 +00:00 |
|