DarioGii 6337fbd30d 1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins ...

2. OAuth2/SAML2 Redirect Security - Validates Referer against CORS whitelist, prevents JWT leakage
3. JWT in HttpOnly Cookies - Moved JWT from URL fragments to secure HttpOnly cookies
4. Refresh Token Infrastructure - Complete implementation with rotation and revocation
5. V2 Flag Removal - Removed from application.properties, AppConfig, and JwtService

2025-10-24 14:15:43 +01:00

..

src

1. CORS Configuration Validation - Prevents allowCredentials(true) with ["*"] origins

2025-10-24 14:15:43 +01:00

.gitignore

refactor: move modules under app/ directory and update file paths (#3938)

2025-07-14 20:53:11 +01:00

build.gradle

Remove backend UI (#4023)

2025-08-11 12:27:18 +01:00