larvit/plainpages
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Document the auth security model in README #40

Closed
lilleman wants to merge 6 commits from auth-security-model into main
pull from: auth-security-model
merge into: larvit:main
Conversation 0 Commits 6 Files Changed 3
+100 -11
lilleman commented 2026-08-02 17:03:11 +02:00
Owner
Copy Link
Copy Source

Consolidates the auth security model into README → Auth → Security model: trust boundaries, a threat→defense table, the fail-closed rule, and pointers to the limits that are deliberately not guaranteed.

Closes the two remaining plain todo items — the docker build/publish one was already satisfied by the completed CI/CD work.

Consolidates the auth security model into README → Auth → Security model: trust boundaries, a threat→defense table, the fail-closed rule, and pointers to the limits that are deliberately not guaranteed. Closes the two remaining plain todo items — the docker build/publish one was already satisfied by the completed CI/CD work.
lilleman added 1 commit 2026-08-02 17:03:11 +02:00
Document the auth security model in README
CI / full-gate (push) Successful in 5s
Details
fb7d20a7db
lilleman marked the pull request as work in progress 2026-08-02 17:03:20 +02:00
lilleman added 1 commit 2026-08-02 17:14:18 +02:00
Review fixes: re-mint path, real session lifetime, full secret checklist
CI / full-gate (push) Successful in 6s
Details
c0fe8b0a82
lilleman added 1 commit 2026-08-02 17:25:06 +02:00
Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test
CI / full-gate (push) Successful in 2m40s
Details
7dee80a976
lilleman added 1 commit 2026-08-02 17:33:03 +02:00
Add the seeded admin login to the production secrets checklist
CI / full-gate (push) Successful in 2m37s
Details
12913402a6
lilleman added 1 commit 2026-08-02 17:33:42 +02:00
Record the open CSRF token-binding decision as a todo item
CI / full-gate (push) Successful in 2m35s
Details
98bdd2c1b5
lilleman added 1 commit 2026-08-02 17:34:55 +02:00
Reflow the security-model prose to the file's wrap width
CI / full-gate (push) Successful in 2m41s
Details
702e42de09
lilleman marked the pull request as ready for review 2026-08-02 18:55:44 +02:00
lilleman closed this pull request 2026-08-03 13:28:53 +02:00
All checks were successful
CI / full-gate (push) Successful in 2m41s
Required
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claes.eismar.se lilleman (Lilleman auf Larv) martin.siden renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: larvit/plainpages#40
Delete Branch "auth-security-model"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?