Jason Woltje 7ead8b1076 fix(#411): remediate backend review findings — COOKIE_DOMAIN, TRUSTED_ORIGINS validation, verifySession ...

- Wire COOKIE_DOMAIN env var into BetterAuth cookie config
- Add URL validation for TRUSTED_ORIGINS (rejects non-HTTP, invalid URLs)
- Include original parse error in validateRedirectUri error message
- Distinguish infrastructure errors from auth errors in verifySession
  (Prisma/connection errors now propagate as 500 instead of masking as 401)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 12:31:53 -06:00

..

api

fix(#411): remediate backend review findings — COOKIE_DOMAIN, TRUSTED_ORIGINS validation, verifySession

2026-02-16 12:31:53 -06:00

coordinator

fix(#374): add pip.conf to coordinator Docker build for private registry

2026-02-15 12:05:04 -06:00

orchestrator

fix: switch Docker images from Alpine to Debian slim for native addon compatibility

2026-02-15 16:02:23 -06:00

web

feat(#417): add fetchWithRetry with exponential backoff for auth

2026-02-16 12:19:46 -06:00