yushenandClaude Opus 4.6 b9a4fa1a6d fix(auth): add CSRF state param, scheme validation, and .envrc to gitignore ...

Add state parameter to CLI browser login flow for CSRF protection — CLI
generates a random state, frontend passes it through, CLI verifies on
callback. Also restrict cli_callback to http: scheme only.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-26 15:04:46 +08:00

..

migrate

feat(logging): add structured logging across server and SDK

2026-03-26 10:57:11 +08:00

multica

fix(auth): add CSRF state param, scheme validation, and .envrc to gitignore

2026-03-26 15:04:46 +08:00

server

feat(auth): email verification login and personal access tokens

2026-03-26 14:32:30 +08:00