DarioGii 6337fbd30d 1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins ...

2. OAuth2/SAML2 Redirect Security - Validates Referer against CORS whitelist, prevents JWT leakage
3. JWT in HttpOnly Cookies - Moved JWT from URL fragments to secure HttpOnly cookies
4. Refresh Token Infrastructure - Complete implementation with rotation and revocation
5. V2 Flag Removal - Removed from application.properties, AppConfig, and JwtService

2025-10-24 14:15:43 +01:00

..

common

1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins

2025-10-24 14:15:43 +01:00

core

1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins

2025-10-24 14:15:43 +01:00

proprietary

1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins

2025-10-24 14:15:43 +01:00

allowed-licenses.json

refactor: move modules under app/ directory and update file paths (#3938)

2025-07-14 20:53:11 +01:00