Jason Woltje 3376d8162e fix(#410): skip CSRF guard on auth catch-all route ...

The global CsrfGuard blocks POST /auth/sign-in/oauth2 with 403 because
unauthenticated users have no session and therefore no CSRF token.
BetterAuth handles its own CSRF protection via toNodeHandler().

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 03:41:50 -06:00

..

api

fix(#410): skip CSRF guard on auth catch-all route

2026-02-16 03:41:50 -06:00

coordinator

fix(#374): add pip.conf to coordinator Docker build for private registry

2026-02-15 12:05:04 -06:00

orchestrator

fix: switch Docker images from Alpine to Debian slim for native addon compatibility

2026-02-15 16:02:23 -06:00

web

fix(#410): align BetterAuth basePath and auth client with NestJS routing

2026-02-15 19:41:08 -06:00