Jason Woltje 7cb7a4f543 fix(#337): Sanitize OAuth callback error parameter to prevent open redirect ...

- Validate error against allowlist of OAuth error codes
- Unknown errors map to generic message
- Encode all URL parameters

Refs #337

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-05 15:58:14 -06:00

..

api

fix(#337): Validate OIDC configuration at startup, fail fast if missing

2026-02-05 15:39:47 -06:00

coordinator

feat(#313): Implement FastAPI and agent tracing instrumentation

2026-02-04 14:25:48 -06:00

orchestrator

fix(#337): Add Zod validation for Redis deserialization

2026-02-05 15:54:48 -06:00

web

fix(#337): Sanitize OAuth callback error parameter to prevent open redirect

2026-02-05 15:58:14 -06:00