forkless/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-08-21 18:52:47 +02:00
Code Issues Packages Projects Releases Wiki Activity
634 Commits 98 Branches 27 Tags
63c20ff17917063d8e8df00a338c30a4bfb6cb4a
Commit Graph
3 Commits
Author SHA1 Message Date
devin-ai-integration[bot]andyoni 000a243861 Close two follow-up viewer authz gaps (session-gate history reads, fail-closed expiry) (#819) 
* Session-gate historical run reads; fail closed on missing expiry

* Accept epoch-seconds relay expiry so valid verification is not misread

* Reject OTP verify responses lacking a usable expiry

---------

Co-authored-by: yoni <yoni@usestrix.com>
 2026-07-21 00:22:19 +00:00
devin-ai-integration[bot]andyoni 7b412ac3b1 Harden local viewer authorization (session capability, history gating, expiry) (#818) 
* Harden viewer authz: session capability, history gating, expiry

* Set session cookie whenever index.html is served

* Gate session capability behind bootstrap token; sync auth status with expiry

---------

Co-authored-by: yoni <yoni@usestrix.com>
 2026-07-20 23:45:11 +00:00
Jonathan Singer f9a966df59 Add tests for PDF reports, viewer auth, and run history gating 2026-07-20 11:52:54 -04:00