 chiappa
|
57ab1ba034
fix: audit `GET /auth/users/{id}` lookups to detect enumeration (SEC_REVIEW F17)
|
5 giorni fa |
|
chiappa
|
400674340e
fix: harden local-admin lookup against is_local-flip tamper (SEC_REVIEW F12)
|
5 giorni fa |
|
chiappa
|
8d948ae676
fix: make admin audit emit transactional with mutation (SEC_REVIEW F4, F5)
|
6 giorni fa |
|
chiappa
|
8a94dff6ae
fix: enforce single local-admin row in upsertLocal (SEC_REVIEW F3)
|
6 giorni fa |
|
chiappa
|
8cf73d2833
feat(M03): api auth foundations — tokens, RBAC, BFF impersonation
|
1 settimana fa |
