Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Meta Vens f3b8acbbc5 Heimdall sign-in: accept only a Heimdall-signed token for an attempt Start issued, in the browser that started it ... The callback verifies the EdDSA access token against Heimdall's JWKS and takes the account, display name and member access from its claims; attempts expire, are bounded, are completed only if issued, and are redeemed once with a per-attempt binding cookie. Not yet built or tested; the first verification run follows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-11 02:54:13 +02:00
..
HeimdallTestKit.cs	Heimdall sign-in: accept only a Heimdall-signed token for an attempt Start issued, in the browser that started it	2026-10-11 02:54:13 +02:00
TestAuthHandler.cs	Initial Scaffold	2026-04-21 20:08:49 +01:00
TestWebApplicationFactory.cs	Trust loopback forwarded headers and pin the Data Protection key ring	2026-10-10 05:26:38 +02:00