Heimdall
58fa80bc5b
Make the attempt cookie's deletion Secure so a browser honours it ...
A __Host- cookie is only removed by a Set-Cookie that is itself Secure. The
hardening test now checks Secure on every header, deletion included, and the
completion tests pin that success and refusal both clear the attempt cookie
with Secure, Path=/ and no Domain.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-09 11:24:02 +00:00
OIDC back-channel logout: a reconciler ends the sessions of subjects who are not Active
2026-10-28 00:38:15 +01:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Concept votes: subjects, appraisals, voter identity, network tag and their one writer
2026-10-10 06:31:43 +02:00
Make the attempt cookie's deletion Secure so a browser honours it
2026-11-09 11:24:02 +00:00
Mill votes: the very-busy refusal offers sign-in to a voter who is not signed in
2026-10-11 20:23:59 +02:00
Initial Scaffold
2026-04-21 20:08:49 +01:00
Add Bifrost profile avatar
2026-05-20 18:13:53 +01:00
Implement alpha foundation workflow and GitHub sync
2026-04-22 09:50:31 +01:00
Heimdall sign-in: the attempt is a cookie, and a code the browser presents is redeemed at Heimdall
2026-10-11 04:40:47 +02:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
58fa80bc5b