Maurice 4704bf5903 fix(auth): fail fast on passkey origins outside the relying party scope (#2147)

2026-09-01 17:18:10 +02:00

..

admin.guard.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

auth-public.controller.ts

Enforce the MFA policy as a guard, and stop 403ing public routes

2026-08-10 13:38:26 +02:00

auth.controller.ts

feat(api): separate API keys from MCP tokens, add travellers

2026-08-28 15:23:05 +02:00

auth.dto.ts

fix(server): tidy passkey quirks after the DI fold

2026-08-02 10:28:22 +02:00

auth.helpers.ts

fix: make the app keyboard-reachable, and close four DoS-able patterns

2026-08-25 19:26:38 +02:00

auth.mcp.ts

Fold nest mcp (#2017)

2026-08-22 12:55:24 +02:00

auth.module.ts

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

auth.service.ts

fix: make the app keyboard-reachable, and close four DoS-able patterns

2026-08-25 19:26:38 +02:00

cookie-auth.guard.ts

refactor(server): move the JWT verify into nest/auth, delete four dead middlewares (#1828)

2026-08-07 18:01:24 +02:00

current-user.decorator.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

ephemeral-token.module.ts

Give the ephemeral tokens a provider, and clear the next wave of type errors

2026-08-10 19:54:46 +02:00

ephemeral-token.service.ts

Correct the ephemeral-token store's own justification

2026-08-11 09:58:37 +02:00

ephemeral-tokens.ts

refactor(server): fold the ephemeral-token store and the in-app action registry (#1836)

2026-08-07 22:18:14 +02:00

global-auth.guard.ts

Enforce the MFA policy as a guard, and stop 403ing public routes

2026-08-10 13:38:26 +02:00

jwt-auth.guard.ts

refactor(server): move the JWT verify into nest/auth, delete four dead middlewares (#1828)

2026-08-07 18:01:24 +02:00

jwt-verify.ts

feat(auth): sliding session renewal past half the token lifetime (#1927)

2026-08-15 22:48:16 +02:00

mfa-policy.guard.ts

Enforce the MFA policy as a guard, and stop 403ing public routes

2026-08-10 13:38:26 +02:00

optional-jwt.guard.ts

refactor(server): move the JWT verify into nest/auth, delete four dead middlewares (#1828)

2026-08-07 18:01:24 +02:00

passkey-enabled.guard.ts

chore: move auth backend to proper DI

2026-08-01 17:39:59 +02:00

passkey.controller.ts

fix(auth): fail fast on passkey origins outside the relying party scope (#2147)

2026-09-01 17:18:10 +02:00

passkey.service.ts

fix(auth): fail fast on passkey origins outside the relying party scope (#2147)

2026-09-01 17:18:10 +02:00

public.decorator.ts

Turn protection from opt-in into default-deny

2026-08-10 13:38:26 +02:00

registration-invites.service.ts

fix: clear every open Sonar security issue, and half the reliability ones (#2037)

2026-08-25 15:22:38 +02:00

session-renewal.interceptor.ts

feat(auth): sliding session renewal past half the token lifetime (#1927)

2026-08-15 22:48:16 +02:00

user-cleanup.service.ts

refactor(server): let user-cleanup inject BudgetService and delete budget.bridge

2026-08-11 16:42:49 +02:00

user-profile.service.ts

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

webauthn-config.service.ts

fix(auth): fail fast on passkey origins outside the relying party scope (#2147)

2026-09-01 17:18:10 +02:00