Aurélien Sibiril 842f9cfbc5 Stop leaking customer email domain in cassette guard → Add PKCE coverage tests for entropy and replay ...

- Stop leaking customer email domain in cassette guard
- Deep-copy ExtraAuthParams in ApplyProviderDefaults
- Drop raw monday graphql error from returned errors
- Add PKCE coverage tests for entropy and replay

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

2026-05-17 17:22:49 +02:00

..

accessreview

Stop leaking customer email domain in cassette guard → Add PKCE coverage tests for entropy and replay

2026-05-17 17:22:49 +02:00

agent

Tighten ctx-suspend plumbing and trim docs

2026-05-08 13:02:52 +02:00

agentruntest

Style

2026-04-27 10:30:14 +02:00

awsconfig

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

baseurl

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

bearertoken

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

bootstrap

Strip email local-part from cassette guard failure → Wire 13 access-review connectors in Helm chart

2026-05-17 17:22:48 +02:00

certmanager

Persist cleared provisioning error before HTTP challenge

2026-04-24 16:05:11 +02:00

cli

Add missing resources to CLI, MCP, and n8n surfaces

2026-04-22 19:02:22 +02:00

cmd

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

connector

Stop leaking customer email domain in cassette guard → Add PKCE coverage tests for entropy and replay

2026-05-17 17:22:49 +02:00

cookiebanner

Derive consent mode from geolocation, not banner config

2026-05-13 12:49:13 +04:00

coredata

Add PKCE, token-body extras, AuthURL templating to OAuth2 → Add settings structs for Pattern-2 connector providers

2026-05-17 17:22:48 +02:00

crypto

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

docgen

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

esign

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

evidencedescriber

Add ISC license headers to Go, TypeScript, and SQL files

2026-03-31 13:31:30 +02:00

file

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

filemanager

Use file model MIME type instead of S3 content type

2026-03-26 17:34:04 +01:00

filevalidation

Fix tests

2026-03-31 19:16:56 +04:00

geoloc

Fix geoloc ip country block imports

2026-05-07 17:30:09 +04:00

gid

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

html2pdf

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

iam

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

llm

Remove json tags from internal structs

2026-04-26 22:58:21 +02:00

mail

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

mailer

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

mailman

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

net

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

page

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

pdfutils

Add background PDF generation for published document versions

2026-04-23 20:50:25 +02:00

probo

Wire post-OAuth pickers and 2-auto callback handling → Track e2e gap for new access-review connectors

2026-05-17 17:22:48 +02:00

probod

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

probodconfig

Add PKCE, token-body extras, AuthURL templating to OAuth2 → Add settings structs for Pattern-2 connector providers

2026-05-17 17:22:48 +02:00

prosemirror

Fix TextLength to count characters instead of bytes

2026-04-09 14:47:48 +04:00

rfc5988

Add RFC 5988 link header parser

2026-04-02 14:37:29 +02:00

saferedirect

Fix compliance page login redirect to custom domains

2026-03-31 10:51:34 +02:00

securecookie

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

securetoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

server

Wire post-OAuth pickers and 2-auto callback handling → Track e2e gap for new access-review connectors

2026-05-17 17:22:48 +02:00

slack

Address code review feedback

2026-04-13 19:24:46 +02:00

slug

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

statelesstoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

thirdparty

Self-host common third party logos via S3

2026-05-12 16:43:36 +04:00

trust

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

uri

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

validator

Validate cookie policy link in banner description

2026-05-02 19:09:16 +04:00

version

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

vetting

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

webhook

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

webinspect

Fix lint

2026-05-12 16:43:38 +04:00