fix(users): CSRF-protect browser auth requests; logout retires the browser session by antosubash · Pull Request #832 · antosubash/simple_module_python

fix(users): CSRF-protect browser auth mutations; logout retires the browser session server-side

antosubash

committed

c9947fe

refactor(optimize): share logout teardown and auth guards; tidy session cache and tests

antosubash

committed

8555b18

fix: address code review findings (round 1, pass 1)

antosubash

committed

665ab24

fix: address code review findings (round 1, pass 1b)

antosubash

committed

9caa85b

fix: address code review findings (round 1, pass 2) — bearer-token routes need no session CSRF token

antosubash

committed

9ee2dbb

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

antosubash

committed

43e530c

docs(changelog): spacing after merge

antosubash

committed

efa59a9

fix(users): move browser session teardown under auth_local; framework CSRF test probes a shared-prop page

antosubash

committed

34f5ca9

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

antosubash

committed

feb328d

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

antosubash

committed

d64361f

Merge origin/main

antosubash

committed

05a32cd

Navigation Menu

Repository navigation

fix(users): CSRF-protect browser auth requests; logout retires the browser session - #832

fix(users): CSRF-protect browser auth requests; logout retires the browser session#832
antosubash merged 11 commits into
mainfrom
fix/s03-login-csrf-logout

Commits on Nov 5, 2026

fix(users): CSRF-protect browser auth mutations; logout retires the browser session server-side

refactor(optimize): share logout teardown and auth guards; tidy session cache and tests

fix: address code review findings (round 1, pass 1)

fix: address code review findings (round 1, pass 1b)

fix: address code review findings (round 1, pass 2) — bearer-token routes need no session CSRF token

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

docs(changelog): spacing after merge

fix(users): move browser session teardown under auth_local; framework CSRF test probes a shared-prop page

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

Merge remote-tracking branch 'origin/main' into fix/s03-login-csrf-logout

Merge origin/main