Eduardo Silva 8418beb482 enhance policy validation by ensuring protected policies have authentication methods and defaulting to HTTPS in external URL construction

2026-03-16 21:05:16 -03:00

..

__init__.py

add initial implementation of auth gateway with models, routes, and session management

2026-03-16 09:47:02 -03:00

oidc_service.py

enhance security by adding HTTP security headers and disabling OpenAPI documentation

2026-03-16 19:49:11 -03:00

password_service.py

enhance security by adding cache control headers, validating password length, and rejecting encoded slashes in path processing

2026-03-16 20:36:49 -03:00

policy_engine.py

enhance policy validation by ensuring protected policies have authentication methods and defaulting to HTTPS in external URL construction

2026-03-16 21:05:16 -03:00

resolver.py

refactor login flow to use context path for redirects and enhance path normalization to prevent traversal bypasses

2026-03-16 19:47:48 -03:00

session_service.py

enhance security by enforcing strict SameSite cookies, validating OIDC callback host, and improving path matching logic

2026-03-16 19:35:24 -03:00

totp_service.py

add initial implementation of auth gateway with models, routes, and session management

2026-03-16 09:47:02 -03:00