ci: validate OAuth security changes - #1

Closed

Blackspirits wants to merge 6 commits into

security/harden-oauth-token-lifecycle

Commits on Aug 9, 2026

security(auth): add OAuth state and token normalization helpers
Blackspirits
committed
78f1564
security(oauth): bind authorization requests to state cookie
Blackspirits
committed
fb62988
security(oauth): validate state and persist token expiry
Blackspirits
committed
a0422ed
security(auth): preserve refresh token lifecycle without logging secrets
Blackspirits
committed
4057486
test(oauth): cover state validation and persisted expiry
Blackspirits
committed
4452001
test(auth): cover OAuth state and refresh token rotation
Blackspirits
committed
9b04c3d