9 Commits

Author	SHA1	Message	Date
Eduardo Silva	ca63b87123	implement CSRF protection by adding token generation, validation, and cookie management in login flows	2026-03-16 20:23:18 -03:00
Eduardo Silva	a9bfcac771	enhance security by sanitizing headers and preventing open redirects	2026-03-16 19:53:05 -03:00
Eduardo Silva	76048593f1	refactor login flow to use context path for redirects and enhance path normalization to prevent traversal bypasses	2026-03-16 19:47:48 -03:00
Eduardo Silva	bf1991457a	enhance security by enforcing strict SameSite cookies, validating OIDC callback host, and improving path matching logic	2026-03-16 19:35:24 -03:00
Eduardo Silva	c707d278f3	add error handling for policy configuration issues in authentication	2026-03-16 14:16:28 -03:00
Eduardo Silva	e1f128f217	implement rate limiting for authentication routes and add custom error handling page	2026-03-16 13:42:20 -03:00
Eduardo Silva	66a3895eff	enhance logging and error handling in authentication process	2026-03-16 11:26:16 -03:00
Eduardo Silva	a68820fd98	add session management routes and session page template	2026-03-16 10:34:10 -03:00
Eduardo Silva	d84cf0a174	add initial implementation of auth gateway with models, routes, and session management	2026-03-16 09:47:02 -03:00