Commit history for src/server/auth.ts
- Security: INT-A21 bind browser-minted editor tokens to the forge session; INT-A22 validate room paths before they enter the shared doc and cap control frames; INT-A7/A8 preview header allow-list extracted with testsb13650b⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
- real git forgebcc398c⌁taigrr committed