shankar0123 11b145b641 Merge Fix 06 (HIGH A-6): strict UA/IP binding — close request-empty bypass in MED-16 ...

# Conflicts:
#	CHANGELOG.md
#	internal/api/handler/auth_session_oidc.go
#	internal/api/handler/auth_session_oidc_test.go

2026-05-11 11:19:04 +00:00

..

acme

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

handler

Merge Fix 06 (HIGH A-6): strict UA/IP binding — close request-empty bypass in MED-16

2026-05-11 11:19:04 +00:00

middleware

harden(audit+session): full SHA-256 audit hash + cookie segment length cap (MED-15 + Nit-4)

2026-05-10 22:02:26 +00:00

router

fix(auth/users): close MED-11 lying field — DeactivatedAt loaded + enforced on login (A-2)

2026-05-11 02:21:05 +00:00