fix(auth): close CSRF on /auth/email/start + per-IP magic-link rate-limit (P0)#177

Merged

mastermanas805 merged 7 commits into

fix/auth-csrf-and-rate-limit

May 29, 2026

Commits on May 29, 2026

fix(auth): close CSRF on /auth/email/start + per-IP magic-link rate-limit (P0)

mastermanas805
and
claude
committed
Merge branch 'master' of github.com:InstaNode-dev/api into fix/auth-csrf-and-rate-limit
claude
committed
fix(auth): add agent_action for invalid_content_type (#177)
claude
committed
fix(auth): satisfy U3 contract — invalid_content_type agent_action needs https URL
claude
committed
fix(auth): remove dead error path in checkPerIPRateLimit (patch coverage)
claude
committed
Merge branch 'master' into fix/auth-csrf-and-rate-limit
mastermanas805
authored
merge master into csrf-rate-limit branch (resolve helpers.go + magic_link.go conflicts)
claude
committed