cgalo5758 94334c0e64 Document CSRF removal in favor of cross-origin checks ...

The server no longer uses CSRF tokens, relying instead on the origin
check in `internal/middleware/csrf.go`. Update all documentation, code
comments, error handling, and specs to reflect the new protection model
and remove the `csrf-secret` configuration key.

2026-09-21 14:35:35 -05:00

..

auth

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00

billing

Move issue tracking to the forge tracker

2026-09-21 02:35:27 -05:00

config

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00

db

Record Stripe environment on mappings and verify ids under the current

2026-09-20 01:51:45 -05:00

demoseed

Remove milestone references from docs and comments

2026-09-21 02:58:07 -05:00

dnsname

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

domains

Fix the four Slice 3 walk findings and page every operator list

2026-09-12 01:16:17 -05:00

embeds

Document CSRF removal in favor of cross-origin checks

2026-09-21 14:35:35 -05:00

entitlements

Remove milestone references from docs and comments

2026-09-21 02:58:07 -05:00

forms

Rebuild the entitlement set Rules surface as a staged batch

2026-09-19 19:46:09 -05:00

fulfillment

Move issue tracking to the forge tracker

2026-09-21 02:35:27 -05:00

httplimit

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00

identity

Fix the four Slice 3 walk findings and page every operator list

2026-09-12 01:16:17 -05:00

instance

Record Stripe environment on mappings and verify ids under the current

2026-09-20 01:51:45 -05:00

integration

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00

integrations

Document CSRF removal in favor of cross-origin checks

2026-09-21 14:35:35 -05:00

lint

Remove milestone references from docs and comments

2026-09-21 02:58:07 -05:00

logging

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

middleware

Remediate security audit findings

2026-09-09 13:25:43 -05:00

migrate

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

organization

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

provisioning

Add entitlement set rule change ledger and preview flow

2026-09-15 03:53:28 -05:00

server

Document CSRF removal in favor of cross-origin checks

2026-09-21 14:35:35 -05:00

stripetest

Record Stripe environment on mappings and verify ids under the current

2026-09-20 01:51:45 -05:00

systemtenant

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

web

Align operator overview with page anatomy parts

2026-09-06 19:50:36 -05:00

workflows

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00