Jason Woltje 976d14d94b fix(#412): enable PKCE, fix docker OIDC default, document @SkipCsrf ...

- AUTH-003: Add safe empty default for OIDC_REDIRECT_URI in swarm compose
- AUTH-004: Enable PKCE (pkce: true) in genericOAuth config (in prior commit)
- AUTH-005: Document @SkipCsrf() rationale (BetterAuth internal CSRF)

Refs #412

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 11:04:34 -06:00

..

decorators

fix(SEC-API-12): Throw error when CurrentUser decorator has no user

2026-02-06 13:39:13 -06:00

guards

fix(#338): Implement proper system admin role separate from workspace ownership

2026-02-05 16:44:50 -06:00

types

fix: code review cleanup

2026-01-29 23:35:40 -06:00

auth-rls.integration.spec.ts

fix(test): Fix DATABASE_URL environment setup for integration tests

2026-02-07 17:46:59 -06:00

auth.config.spec.ts

fix(#412): add OIDC_REDIRECT_URI to startup validation

2026-02-16 11:02:56 -06:00

auth.config.ts

fix(#412): add OIDC_REDIRECT_URI to startup validation

2026-02-16 11:02:56 -06:00

auth.controller.spec.ts

fix(#410): use toNodeHandler for BetterAuth Express compatibility

2026-02-15 19:06:49 -06:00

auth.controller.ts

fix(#412): enable PKCE, fix docker OIDC default, document @SkipCsrf

2026-02-16 11:04:34 -06:00

auth.module.ts

feat(#4): Implement Authentik OIDC authentication with BetterAuth

2026-01-28 17:26:34 -06:00

auth.rate-limit.spec.ts

fix(#410): use toNodeHandler for BetterAuth Express compatibility

2026-02-15 19:06:49 -06:00

auth.service.spec.ts

feat(#4): Implement Authentik OIDC authentication with BetterAuth

2026-01-28 17:26:34 -06:00

auth.service.ts

fix(#410): use toNodeHandler for BetterAuth Express compatibility

2026-02-15 19:06:49 -06:00