3 Commits

Author	SHA1	Message	Date
google-labs-jules[bot]	edbceae0fb	feat(events): implement bifurcated join inputs and NAT-safe idempotency ... - Adds UI links for joining with PIN in Login and Register pages. - Normalizes event slugs to lowercase (preserving hyphens) and event PINs to strip all hyphens/spaces to handle raw inputs. - Implements a pre-check rate limit pattern (`isRateLimited`) to safely enforce a max of 5 failed attempts per IP window (60s) without rate-limiting successful authentications. - Achieves NAT-safe idempotency in `POST /api/join` by extracting and reusing active event guest sessions instead of blindly incrementing claimed seats on every request. - Integrates complete test suite coverage for these new constraints. Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>	2026-08-26 23:57:13 +00:00
google-labs-jules[bot]	9988df3218	audit: verify 3-tier auth, rbac, and decouple server side effects ... - Add `app` export and wrap startup logic behind `if (import.meta.main)` - Extract `hono` middleware into `sdk/hono.ts` for clean separation - Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`) - Implement comprehensive native Deno mock tests in `server/main.test.ts` - Fix type checking across project files Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>	2026-08-22 00:29:19 +00:00
Tyler Gillispie	ac89e4c8d0	feat: initial commit for auth-yes identity hub	2026-08-21 14:27:36 -07:00