hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
T-HUB/apps
History
Exact
glass beadian 74f0802f1a fix: oidc hardening — sid-less consent refused, rotation race closed, iss on errors, logout honesty 
From the logic audit:
- consent rejects sid-less bearers and requires a LIVE hub session
  (sessionAlive) before minting codes — a logged-out bearer can no longer
  mint downstream tokens inside its TTL
- refresh rotation race closed: consume returns whether THIS call won;
  the loser revokes the family (reuse detection now holds under
  concurrency)
- error redirects carry iss (RFC 9207) on error responses too
- logout awaits the revocation and no longer returns ok for missing or
  forged bearers
2026-10-18 11:54:59 +00:00
..
api fix: oidc hardening — sid-less consent refused, rotation race closed, iss on errors, logout honesty 2026-10-18 11:54:59 +00:00
archive-bot Phase B: encrypted archive export bundles (age), power-level-gated export command, encryption-state linter 2026-10-12 12:46:56 +00:00
media-worker feat: adapt T-HUB features — folders schema, Instagram connector, outreach contacts, media RLS force 2026-10-18 10:40:45 +00:00
scheduler fix: deliver alt texts to providers at publish time 2026-10-16 01:52:35 +00:00
web feat: adapt T-HUB features — folders schema, Instagram connector, outreach contacts, media RLS force 2026-10-18 10:40:45 +00:00