Jason WoltjeandClaude Opus 4.6 7ebbcbf958 fix(#414): extract trustedOrigins to getTrustedOrigins() with env vars ...

Replace hardcoded production URLs with environment-driven config.
Reads NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_API_URL, TRUSTED_ORIGINS.
Localhost fallbacks only in development mode.

Refs #414

Co-Authored-By: Claude Opus 4.6 <[email protected]>

2026-02-16 11:25:58 -06:00

..

decorators

fix(SEC-API-12): Throw error when CurrentUser decorator has no user

2026-02-06 13:39:13 -06:00

guards

fix(#338): Implement proper system admin role separate from workspace ownership

2026-02-05 16:44:50 -06:00

types

fix: code review cleanup

2026-01-29 23:35:40 -06:00

auth-rls.integration.spec.ts

fix(test): Fix DATABASE_URL environment setup for integration tests

2026-02-07 17:46:59 -06:00

auth.config.spec.ts

fix(#414): extract trustedOrigins to getTrustedOrigins() with env vars

2026-02-16 11:25:58 -06:00

auth.config.ts

fix(#414): update session config to 7d absolute, 2h idle timeout

2026-02-16 11:24:15 -06:00

auth.controller.spec.ts

feat(#413): add OIDC provider health check with 30s cache

2026-02-16 11:20:05 -06:00

auth.controller.ts

feat(#413): add OIDC provider health check with 30s cache

2026-02-16 11:20:05 -06:00

auth.module.ts

feat(#4): Implement Authentik OIDC authentication with BetterAuth

2026-01-28 17:26:34 -06:00

auth.rate-limit.spec.ts

fix(#410): use toNodeHandler for BetterAuth Express compatibility

2026-02-15 19:06:49 -06:00

auth.service.spec.ts

feat(#413): add OIDC provider health check with 30s cache

2026-02-16 11:20:05 -06:00

auth.service.ts

feat(#413): add OIDC provider health check with 30s cache

2026-02-16 11:20:05 -06:00