feat: implement CSRF protection for OAuth flows with nonce validation#20983

Merged

roboquat merged 22 commits intomainfrom

Aug 1, 2025

Commits on Jul 28, 2025

feat: implement CSRF protection for OAuth flows with nonce validation

iQQBot
and
ona-agent
committed
refactor: consolidate fragment protection and fix context provider conflict

iQQBot
and
ona-agent
committed
fix: handle GitHub OAuth api subdomain edge case with secure redirect

iQQBot
and
ona-agent
committed
fix: simplify api subdomain redirect test to avoid dependency injection complexity

iQQBot
and
ona-agent
committed
docs: update domain examples to use gitpod.io instead of preview domains

iQQBot
and
ona-agent
committed
fix cookie

iQQBot
and
ona-agent
committed

Commits on Jul 29, 2025

Commits on Jul 31, 2025