Issues - lab/authz-bridge - Forgejo: Beyond coding. We forge.

lab/authz-bridge

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

Exchange tokenCache hardening: digest key, single-flight, subject-exp-capped TTL, zeroized value

ready-for-agent

#61 opened 2026-09-20 19:05:09 +00:00 by ginjiruu

Verify the discovery document's issuer in the IdP resolver

ready-for-agent

#59 opened 2026-09-19 01:23:17 +00:00 by ginjiruu 0 / 4

Bind the Session cookie to the App and enforce per-App client uniqueness

ready-for-agent

#58 opened 2026-09-19 01:23:16 +00:00 by ginjiruu 0 / 5

Validate returnTo at creation (scheme injection / open redirect)

ready-for-agent

#57 opened 2026-09-19 01:23:15 +00:00 by ginjiruu 0 / 4

Protect the flow Endpoints: NetworkPolicy + mTLS/TLS on the listeners

ready-for-agent

#56 opened 2026-09-19 01:23:15 +00:00 by ginjiruu 0 / 6

Scope the bridge's Secret access to the referenced per-App Secrets (per-client RBAC grants)

ready-for-agent

#55 opened 2026-09-19 01:23:14 +00:00 by ginjiruu 0 / 7

Future deepening: extract the status application + deepen the Flow module

ready-for-agent

#54 opened 2026-09-16 19:31:27 +00:00 by ginjiruu