lundberg

lundberg pushed to main at lundberg/porchlight

2026-06-10 08:03:19 +00:00

27763d19ea fix(security): don't mint new ID tokens on refresh; confirm offline_access gating

519e3659a1 feat(security): add baseline security-header middleware

c7550cbf09 fix(security): lock down signing-key file permissions

cba63280fb fix(security): set an explicit session cookie lifetime

Compare 4 commits »

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-06-09 21:06:01 +00:00

5845edfc6e Change to once

lundberg pushed to main at lundberg/porchlight

2026-06-05 12:14:03 +00:00

cf2754f302 fix(security): require a configured session secret in production

c175633980 fix(security): POST WebAuthn login-begin; render JS errors as text

1571706d21 fix(security): reject WebAuthn signature-counter rollback

f03d509eb4 fix(security): enforce globally-unique WebAuthn credential_id

0f04a7daf9 feat(security): make WebAuthn user verification configurable

Compare 5 commits »

lundberg pushed to main at lundberg/porchlight

2026-06-05 11:42:31 +00:00

baef5e0e2e fix(security): require CSRF-protected POST to consume a registration link

efb265a68b fix(security): make rate-limit client IP proxy-aware

aedb451128 fix(security): prevent removing the last active admin

e54764cda9 fix(security): guard admin credential deletion against lockout

1bb76899a5 fix(security): make self-service last-credential guard atomic

Compare 15 commits »

lundberg pushed to main at lundberg/porchlight

2026-06-03 14:36:18 +00:00

2fc2bdcabb test: allow disabling rate limiting for e2e runs

bcfe3a2a15 fix: keep password form visible on validation error

Compare 2 commits »

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-05-23 19:27:12 +00:00

840baab7ba fixed broken nav

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-05-12 20:59:34 +00:00

7e229988de remove wrong state

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-05-12 20:05:41 +00:00

a8a7e792f3 remove weird symbol before name

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-05-12 19:13:50 +00:00

e963537f50 remove weird symbol before name

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-05-10 19:30:20 +00:00

f13daf153d remove call to non existing metastate stuck

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-04-24 19:58:35 +00:00

88304e01eb added vr_run.nav

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-04-24 19:41:01 +00:00

31b51fe9c2 Added vr_leader.met and vr_follower.met

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-04-21 19:01:58 +00:00

d0b3401630 17s -> 25s pause during ah recall

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-04-14 21:16:11 +00:00

c068543521 added Viridian Rise profile template

lundberg pushed to main at lundberg/porchlight

2026-04-10 09:29:12 +00:00

fb133f9cba add uncommitted plans and CLAUDE.md

6b4cbdc152 clean up

Compare 2 commits »

lundberg created branch main in lundberg/porchlight

2026-04-10 09:24:57 +00:00

lundberg pushed to main at lundberg/porchlight

2026-04-10 09:24:57 +00:00

01e3382aaf fix: resolve all ruff lint errors and type checker warnings

2b652ff603 added ruff config

2745471412 fix: narrow type for PasswordChange to satisfy type checker

d7cdedbd5f style: apply ruff formatting to new files

a65af90320 feat: require current password when changing password, add zxcvbn strength check

Compare 10 commits »

lundberg created repository lundberg/porchlight

2026-04-10 09:23:07 +00:00

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-03-17 22:13:40 +00:00

be08ca24b7 aug and stipend for aphus

lundberg pushed to main at SawatoMosswartsEn.../metas

2026-03-17 20:31:56 +00:00

5ff48b8f10 add recomp mana scarabs