Heimdall
58fa80bc5b
Make the attempt cookie's deletion Secure so a browser honours it ...
A __Host- cookie is only removed by a Set-Cookie that is itself Secure. The
hardening test now checks Secure on every header, deletion included, and the
completion tests pin that success and refusal both clear the attempt cookie
with Secure, Path=/ and no Domain.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-09 11:24:02 +00:00
Heimdall complete page: run its real script under Node in tests
2026-10-11 08:58:20 +02:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
Heimdall complete page: run its real script under Node in tests
2026-10-11 08:58:20 +02:00
Gate deployments with typed release authority
2026-07-16 18:28:13 +01:00
ConceptAppraisalServiceTests: a recast through a fresh context persists the changed stance
2026-10-10 09:56:52 +02:00
Registry tests: pin the order of already-retired entries
2026-10-10 23:26:43 +02:00
Tally export Vary: plain append, no dedupe
2026-10-10 22:19:52 +02:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
Make the attempt cookie's deletion Secure so a browser honours it
2026-11-09 11:24:02 +00:00
Vote budgets: at the cap a new key evicts the least recently used key with permits left
2026-10-11 19:16:30 +02:00
Heimdall complete page: run its real script under Node in tests
2026-10-11 08:58:20 +02:00
Make the attempt cookie's deletion Secure so a browser honours it
2026-11-09 11:24:02 +00:00
Initial Scaffold
2026-04-21 20:08:49 +01:00
Vote budgets: monotonic windows, a key cap, 30 mints an hour and a readable 429
2026-10-11 17:32:01 +02:00
Purge audit: Detail carries window and count, never the network tag the member dashboard would render
2026-10-10 09:56:08 +02:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Concept vote tests: close the mutation survivors in view, purge window, slug and prefix masking
2026-10-10 08:42:55 +02:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
OIDC back-channel logout: a reconciler ends the sessions of subjects who are not Active
2026-10-28 00:38:15 +01:00
Logout tests: pin the loop's own tick-failure catch now that subject faults are isolated
2026-10-28 01:57:31 +01:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Add Heimdall patron support intake
2026-06-09 17:16:27 +01:00
Move public crossings onto typed Bifrost transport
2026-07-15 22:16:07 +01:00
Delete Epiphany operator bridge
2026-08-22 06:16:39 +02:00
58fa80bc5b