Security enhancements#204

Merged

acobster merged 45 commits into

mainfrom

feature/hash-session-keys

Apr 13, 2026

Commits on Apr 12, 2026

hash session keys
Coby Tamayo
committed
configurable key-length
Coby Tamayo
committed
refactor SignupPage
Coby Tamayo
committed
rm LoginStyle
Coby Tamayo
committed
read secret-key from env
Coby Tamayo
committed
sha-512 aero reader
Coby Tamayo
committed
t/seconds-from-now
Coby Tamayo
committed
correct let binding name
Coby Tamayo
committed
fix t/seconds-from-now
Coby Tamayo
committed
s/invitation-query/invitation-queries
Coby Tamayo
committed
fix arity-1 seconds-ago
Coby Tamayo
committed
lint
Coby Tamayo
committed
test and fix internal.time
Coby Tamayo
committed
check invitation age
Coby Tamayo
committed
refactor signup to not use full ::bread/config map
Coby Tamayo
committed
test custom auth/signup config
Coby Tamayo
committed
lint
Coby Tamayo
committed
test ::signup/validate
Coby Tamayo
committed
test existing-username check
Coby Tamayo
committed

Commits on Apr 13, 2026

test ::signup/check-invitation-age
Coby Tamayo
committed
explicitly support zero, negative values for invitation-expiration-seconds
Coby Tamayo
committed
test global session invalidation
Coby Tamayo
committed
query auth/database for sensitive queries
Coby Tamayo
committed
cleanup signup-test
Coby Tamayo
committed
test-signup-flow
Coby Tamayo
committed
cleanup database, log initial-txns
Coby Tamayo
committed
configure not-found-component for /_/signup
Coby Tamayo
committed
hash invitations using secret-key
Coby Tamayo
committed
simplify signup flow test
Coby Tamayo
committed
account for :auth/secret-key in signup-test
Coby Tamayo
committed
improve signup test coverage
Coby Tamayo
committed
dissoc body in ::ring/response
Coby Tamayo
committed
cleanup
Coby Tamayo
committed
refactor ::component/render
Coby Tamayo
committed
fix signup-flow-test ns
Coby Tamayo
committed
refactor: ::signup/render
Coby Tamayo
committed
respond with 400 on invalid signup attempt
Coby Tamayo
committed
display password guidelines
Coby Tamayo
committed
port ::account-form
Coby Tamayo
committed
password guidelines on account page
Coby Tamayo
committed
fix EmailPage
Coby Tamayo
committed
port ::account/timezone
Coby Tamayo
committed
port ::account/sessions
Coby Tamayo
committed
finish porting Sections to RISE
Coby Tamayo
committed
custom validation TODO...
Coby Tamayo
committed