Skip to content

v2.2.1 Secure OAuth CSRF Protection

Choose a tag to compare

View all tags
@paudang paudang released this 13 May 01:52
· 77 commits to main since this release
v2.2.1
c72fc3e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Secure OAuth CSRF Protection: Implemented robust state-validation using cryptographically secure random tokens and HttpOnly cookies to mitigate CSRF attacks in social authentication flows.
  • Improved CLI Robustness: Enhanced argument parsing to support comma-separated strings for variadic flags like --social-auth and --auth.

Fixed

  • Architectural Parity & Type Safety: Standardized HTTP_STATUS.FORBIDDEN across all templates and resolved TypeScript type inference issues (never type) in generated Clean Architecture controllers.
Assets 2
Loading