GameCult/Bifrost
Watch
9
0
Fork
You've already forked Bifrost
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions 1
Bifrost/src/Bifrost.Web
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Meta Vens 15f96c408c Heimdall sign-in: attempt cookies live in a ring of two fixed slots, so the Cookie header is bounded by construction; pin the completion form's id 
Start takes a free slot or overwrites the one expiring first; parallel starts carry the same request
cookies, choose the same slot and overwrite each other. Complete finds its attempt by scanning the
slots for the posted nonce; an overwritten attempt finds none and is refused like any other. The
per-request counting sweep, its byte budget and the nonce-named cookie are deleted.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-11 22:25:24 +02:00
..
Configuration Heimdall sign-in: the attempt is a cookie, and a code the browser presents is redeemed at Heimdall 2026-10-11 04:40:47 +02:00
Data Migration AddConceptVotes, generated by dotnet-ef 8.0.0 2026-10-10 06:39:59 +02:00
Domain Concept votes: subjects, appraisals, voter identity, network tag and their one writer 2026-10-10 06:31:43 +02:00
Features Heimdall sign-in: attempt cookies live in a ring of two fixed slots, so the Cookie header is bounded by construction; pin the completion form's id 2026-10-11 22:25:24 +02:00
Pages Vote page: explicit no-store (the antiforgery write no longer supplies it), handler must match the request, empty Origin counts as present 2026-10-11 00:15:13 +02:00
Properties Initial Scaffold 2026-04-21 20:08:49 +01:00
wwwroot Add Bifrost profile avatar 2026-05-20 18:13:53 +01:00
appsettings.Development.json Implement alpha foundation workflow and GitHub sync 2026-04-22 09:50:31 +01:00
appsettings.json Heimdall sign-in: the attempt is a cookie, and a code the browser presents is redeemed at Heimdall 2026-10-11 04:40:47 +02:00
Bifrost.Web.csproj Heimdall sign-in: accept only a Heimdall-signed token for an attempt Start issued, in the browser that started it 2026-10-11 02:54:13 +02:00
Program.cs Heimdall sign-in: attempt cookies live in a ring of two fixed slots, so the Cookie header is bounded by construction; pin the completion form's id 2026-10-11 22:25:24 +02:00