Repository navigation

Additional security fixes - #257

Merged

rthellend merged 38 commits into

mainfrom

review-2026-10-14

Oct 16, 2026

Merged

Additional security fixes#257
rthellend merged 38 commits into
mainfrom
review-2026-10-14

Commits on Oct 14, 2026
Commits on Oct 15, 2026
- Update go
  rthellend
  committed
  8be5334
- proxy: bypass CSRF on PKI OCSP and OIDC userinfo POST endpoints
  rthellend
  committed
  4560206
- Update CHANGELOG.md
  rthellend
  committed
  5ea3220
- Fix release note descriptions in CHANGELOG.md
  rthellend
  committed
  fde8051
- passkeys: redirect to login in ManageKeys when session lacks passkey_hash
  rthellend
  committed
  cc0341d
- Fix flake in TestWebSocketAndConnectionUpgrade and stop WebSocket ping loop on close
  rthellend
  committed
  125c15f
- Address review findings: login flow for scoped handlers, OCSP caching and GET parsing, CA re-issue logging, and cleanups
  
  rthellend
  and
  claude
  committed
  f6d0930
- pki: preserve SubjectKeyId when re-issuing the CA certificate, and look up local PKIs by all issued key IDs
  
  rthellend
  and
  claude
  committed
  a43bcf8
- pki: test that CA rotation at half lifetime preserves the SubjectKeyId
  
  rthellend
  and
  claude
  committed
  73651f7
- Fix data race on closeTrackingConn.closed in tests
  
  rthellend
  and
  claude
  committed
  9454a8d