Block a user
final 1.0rc1 review/audit/test/qa
QA Audit Status: All Items Resolved ✅
All 11 issues created from the original audit are closed:
Original Blockers (3/3…
feat: add per-IP rate limiting to login endpoint
Review: PR #78 — per-IP rate limiting on login endpoint
feat: add per-IP rate limiting to login endpoint
Rebased onto current main after PR #84 merge (auth refactor: cookies replace Bearer tokens, /register removed, PASS command added).
**Conflicts…
Enforce and document exact-match-only for signature verification
Review: PR #40 — Enforce and document exact-match-only for signature verification
Enforce and document exact-match-only for signature verification
Appname doesn’t need to be in main and internal/globals both
Appname doesn’t need to be in main and internal/globals both
Completed by PR #34 (merged by sneak). Closing.
refactor: replace Bearer token auth with HttpOnly cookies
Rework complete — removed 3 stale registration references from README.md:
- Line ~215:
session/register request→session request - Line ~221: `session creation, registration, or…
refactor: replace Bearer token auth with HttpOnly cookies
Review: PR #84 — Cookie-Based Auth Refactor (post-rebase)
feat: add per-IP rate limiting to login endpoint
Review: PR #78 — Login Rate Limiting (post-rebase onto db3d23c)
refactor: replace Bearer token auth with HttpOnly cookies
Rebase Complete
Rebased feature/cookie-auth-refactor onto current main (db3d23c) which includes PR #82 (username/hostname/OPER support).
###…