Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Heimdall c757acf525 Make every cookie host-only: __Host- names, Secure, Path=/, no Domain ... Session, OAuth correlation, antiforgery, voter and Heimdall attempt cookies all take the __Host- prefix. The prefix forbids a narrower Path, so the voter (was /mill) and attempt (was /auth/heimdall) cookies move to Path=/. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>		2026-11-07 18:42:43 +00:00
..
CapturingLoggerProvider.cs	Concept vote rate limits: cast and mint budgets per account or network prefix	2026-10-11 09:00:23 +02:00
HeimdallTestKit.cs	Make every cookie host-only: __Host- names, Secure, Path=/, no Domain	2026-11-07 18:42:43 +00:00
OidcLogoutKit.cs	Logout tests: pin the loop's own tick-failure catch now that subject faults are isolated	2026-10-28 01:57:31 +01:00
OidcTestKit.cs	Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)	2026-10-27 04:57:16 +01:00
TestAuthHandler.cs	Concept vote rate limits: cast and mint budgets per account or network prefix	2026-10-11 09:00:23 +02:00
TestWebApplicationFactory.cs	Merge hands/heimdall-callback-signed	2026-10-22 18:11:28 +02:00