wiki-cafe/member-console
1
1
Fork 0
Code Issues 206 Pull Requests Packages Projects 1 Releases Activity
Files
94334c0
member-console/openspec/specs
T
History
cgalo5758 94334c0e64 Document CSRF removal in favor of cross-origin checks 
The server no longer uses CSRF tokens, relying instead on the origin
check in `internal/middleware/csrf.go`. Update all documentation, code
comments, error handling, and specs to reflect the new protection model
and remove the `csrf-secret` configuration key.
2026-09-21 14:35:35 -05:00
..
auto-provisioning
Reorganize status docs and add identifier docs
2026-08-29 21:15:31 -05:00
billing-accounts
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
chrome-conventions
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
console-init
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
container-image
Remediate security audit findings
2026-09-09 13:25:43 -05:00
db-error-presentation
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
deployment-docs
Add setup checklist and empty-state guidance
2026-08-23 03:06:11 -05:00
deployment-identity
Make UI surfaces honestly reflect system state
2026-08-23 01:45:52 -05:00
discourse-group-sync
Add Discourse integration
2026-07-20 19:49:34 -07:00
discourse-identity-linkage
Add Discourse integration
2026-07-20 19:49:34 -07:00
discourse-integration-infrastructure
Add Discourse integration
2026-07-20 19:49:34 -07:00
discourse-member-surface
Make member dashboard registry-driven
2026-07-21 22:50:52 -05:00
discourse-operator-surface
Introduce the forms library and migrate all forms
2026-09-05 03:16:45 -05:00
domain-authorization
Make UI surfaces honestly reflect system state
2026-08-23 01:45:52 -05:00
domains-registry
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
empty-state-guidance
Add setup checklist and empty-state guidance
2026-08-23 03:06:11 -05:00
entitlement-conferral
Archive Doc 41 conferral uniformity specs
2026-07-11 14:36:03 -05:00
entitlement-set-history
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
entitlement-set-management
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
entitlement-sets
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
entitlements
Rebuild the entitlement set Rules surface as a staged batch
2026-09-19 19:46:09 -05:00
error-pages
Remediate security audit findings
2026-09-09 13:25:43 -05:00
fedwiki-sites
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
form-conventions
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
form-library
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
http-security-headers
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
identity
Identity and organization modules.
2026-03-23 17:28:14 -05:00
integration-config-declaration
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
integration-registration
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
integration-settings
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
keycloak-test-seed
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
member-console-demo-seed
Seed ledger demo via shared grant act helpers
2026-09-07 00:51:49 -05:00
member-dashboard
Apply the acceptance fixes and archive the change (10k.4)
2026-09-03 17:00:14 -05:00
member-entitlement-view
Make member dashboard registry-driven
2026-07-21 22:50:52 -05:00
member-invoice-history
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
member-plan-upgrade
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
member-product-discovery
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
model-catalog
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
module-migrations
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
oidc-login
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
operator-billing-views
Record Stripe environment on mappings and verify ids under the current
2026-09-20 01:51:45 -05:00
operator-list-scale
Fix the four Slice 3 walk findings and page every operator list
2026-09-12 01:16:17 -05:00
operator-panel-navigation
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
operator-people-directory
Apply the acceptance fixes and archive the change (10k.4)
2026-09-03 17:00:14 -05:00
operator-setup-checklist
Introduce the forms library and migrate all forms
2026-09-05 03:16:45 -05:00
operator-topology-overview
Apply the acceptance fixes and archive the change (10k.4)
2026-09-03 17:00:14 -05:00
org-types
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
organization
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
page-anatomy
Right-align every Actions column and hide its header
2026-09-19 22:31:45 -05:00
per-schema-roles
Isolate tests in per-purpose databases
2026-08-01 04:13:57 -05:00
plan-downgrade
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
plan-enrollment-administration
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
plan-ladder-management
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
plan-ladders
Archive Doc 41 conferral uniformity specs
2026-07-11 14:36:03 -05:00
plan-transitions
Pause integration schedules when disabled
2026-07-23 01:38:45 -05:00
postgres-database
Introduce DB schema separation (core and fedwiki)
2026-03-30 15:16:43 -05:00
price-management
Archive Doc 41 conferral uniformity specs
2026-07-11 14:36:03 -05:00
product-catalog
Add entitlement set rule change ledger and preview flow
2026-09-15 03:53:28 -05:00
product-management
Record Stripe environment on mappings and verify ids under the current
2026-09-20 01:51:45 -05:00
provider-http-responses
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
provider-lifecycle-contract
Specify system tenant for ownerless sites
2026-06-24 00:32:53 -05:00
provider-registry
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
safe-template-rendering
Buffer template rendering and fix FedWiki sync
2026-03-29 04:58:02 -05:00
schema-namespacing
Add domains registry with claims and placements
2026-07-24 21:25:40 -05:00
startup-configuration
Fix five findings from security audit run 2
2026-09-09 20:53:31 -05:00
stripe-customer-sync
Record Stripe environment on mappings and verify ids under the current
2026-09-20 01:51:45 -05:00
stripe-integration-infrastructure
Document CSRF removal in favor of cross-origin checks
2026-09-21 14:35:35 -05:00
stripe-invoice-payment-projection
Remediate security audit findings
2026-09-09 13:25:43 -05:00
stripe-product-catalog-sync
Record Stripe environment on mappings and verify ids under the current
2026-09-20 01:51:45 -05:00
stripe-subscription-creation
Record Stripe environment on mappings and verify ids under the current
2026-09-20 01:51:45 -05:00
stripe-subscription-management
Fix security audit findings from 2026-09-21 scan
2026-09-21 13:57:57 -05:00
system-tenant
Adopt entity keys and add invoice numbers
2026-08-29 20:12:04 -05:00
temporal-connection
Archive first-run readiness specs
2026-07-01 22:53:15 -05:00
test-database-isolation
Isolate tests in per-purpose databases
2026-08-01 04:13:57 -05:00
ui-quality-gate
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
ui-vocabulary
Move issue tracking to the forge tracker
2026-09-21 02:35:27 -05:00
webhook-partition-maintenance
Restrict member surfaces to published products
2026-08-22 12:58:05 -05:00
workspace-management
Introduce the forms library and migrate all forms
2026-09-05 03:16:45 -05:00
worktree-test-stacks
Drop the CLAUDE.md symlink
2026-09-19 19:47:15 -05:00