3 Commits

Include renames

Author	SHA1	Message	Date
cgalo5758	0b28a9dc29	Remediate security audit findings ... - Replace gorilla/csrf with net/http CrossOriginProtection - Require valkey-password and add TLS options for session store - End session at /logout and revoke refresh tokens - Re-derive identity and roles from provider every five minutes - Process each Stripe webhook event in its own Temporal workflow - Give each outbox entry its own workflow with Temporal retries - Guard against stale Stripe events with provider timestamps - Derive transport security from base-url scheme	2026-09-09 13:25:43 -05:00
cgalo5758	7bff4ac603	Validate startup config and retry Temporal ... Fail fast with aggregated config errors after resolving secret files, before services initialize. Add Valkey session config, remove the unused session-secret, and fix the production CSP env key. Retry initial Temporal dials with bounded backoff and gate the test Temporal service on healthy DB and Keycloak dependencies.	2026-07-01 19:04:26 -05:00
cgalo5758	beb2c7b344	Add comprehensive documentation for OIDC authentication flow in internal/auth	2025-12-13 17:38:19 -06:00