saopig1andClaude Opus 4.8 821fa0669d feat(mw): add unified authorize() gate and requireNotGuest ...

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 11:38:21 +08:00

..

authorize.test.ts

feat(mw): add unified authorize() gate and requireNotGuest

2026-06-25 11:38:21 +08:00

authorize.ts

feat(mw): add unified authorize() gate and requireNotGuest

2026-06-25 11:38:21 +08:00

csrf.test.ts

fix(web): referrer-policy same-origin so same-origin POSTs keep a real Origin

2026-05-29 21:25:20 +08:00

csrf.ts

feat(auth): add csrfOriginCheck middleware

2026-05-27 13:38:35 +08:00

rateLimit.test.ts

feat(auth): rate-limit /login+/setup, per-user session cap, periodic /me poll

2026-05-27 16:16:07 +08:00

rateLimit.ts

feat(auth): rate-limit /login+/setup, per-user session cap, periodic /me poll

2026-05-27 16:16:07 +08:00

requireAdmin.test.ts

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

requireAdmin.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

requireAuth.test.ts

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

requireAuth.ts

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

requireNotGuest.test.ts

feat(mw): add unified authorize() gate and requireNotGuest

2026-06-25 11:38:21 +08:00

requireNotGuest.ts

feat(mw): add unified authorize() gate and requireNotGuest

2026-06-25 11:38:21 +08:00

requirePermission.test.ts

test(perm): cover requireBotAccess 401 + missing-param cases

2026-05-30 13:15:01 +08:00

requirePermission.ts

feat(perm): enforce capabilities + bot access on action routes

2026-05-30 13:32:08 +08:00