Commit history for src/server/github-oauth.ts
0c7b2c4⌁
- Prompt signed-out visitors to sign in instead of showing controls that fail: sign-in CTAs on compare, PR conversation, star and fork; return-to-page after sign-in (password, 2FA, passkey, GitHub, sign-up) with safe next paths; guard account-only routes; disable the editor hotkey and Re-check when signed out.5d783eb⌁taigrr committed
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Close billing abuse gaps before launch: stop AI calls once tokens are spent, keep org billing owner-only (admins view-only), key rate limits on the IPv6 /64, withhold compute and AI from unverified free accounts and their orgs, and rate-limit scratch git mode and GitHub sign-ups.9058348⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
- real git forgebcc398c⌁taigrr committed