mirror of
https://gh-proxy.org/https://github.com/klinsmaya/new-api.git
synced 2026-11-09 18:07:04 +08:00
Preserve backend details and error causes, and report each failed operation once across request, Query/Mutation, and page handling layers. Independent operations with the same error message still receive separate notifications. Migrate direct requests and query consumers, preserve inline and silent error handling, and reject failed settings writes before success callbacks run. Retain safe authentication messages, refresh behavior, and single-use proof replay protection. Validation: independently checked the staged snapshot with 117 frontend test files (1105 tests), typecheck, scoped lint, and protected-header formatting. Security references: OWASP ASVS 5.0.0, Authentication Cheat Sheet, and Session Management Cheat Sheet: https://owasp.org/www-project-application-security-verification-standard/ https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html