ryan 895788974c fix(oauth): secure OAuth state session binding to prevent account takeover ...

Bind OAuth state payloads to the initiating session token and user ID.
Verifies session token hash continuity during callback, and validates that
the user ID completing the binding flow matches the user ID that initiated it.

2026-06-13 09:55:07 +08:00

..

admin

兼容包名

2026-06-12 15:32:47 +08:00

cap

质量优化

2026-06-10 13:50:58 +08:00

config

精简

2026-06-10 11:33:33 +08:00

custom

更新示例

2026-06-10 15:11:42 +08:00

health

精简

2026-06-10 11:33:33 +08:00

oauth

fix(oauth): secure OAuth state session binding to prevent account takeover

2026-06-13 09:55:07 +08:00

risk_control

框架表改名 w_{name}

2026-06-11 09:27:15 +08:00

upload

缓存处理修补

2026-06-11 19:07:22 +08:00

user

fix(oauth): secure OAuth state session binding to prevent account takeover

2026-06-13 09:55:07 +08:00