Skip to content

Security: harden auth sessions and rate limits - #4

Merged
Hqzdev merged 2 commits into
mainfrom
security/auth-hardening
Jun 30, 2026
Merged

Hqzdev merged 2 commits into
mainfrom
security/auth-hardening

Conversation

@Hqzdev

@Hqzdev Hqzdev commented Jun 30, 2026

Copy link
Copy Markdown
Owner

Summary

  • validate active DB sessions for private auth routes instead of trusting JWTs alone
  • add DB-backed auth rate limits and temporary lockouts for sensitive auth flows
  • forward client context through the web BFF and gateway for audit and rate-limit decisions
  • keep the site header visible during scroll

Validation

  • npm run check
  • npm run check:web
  • prisma migrate diff --from-migrations packages/database/prisma/migrations --to-schema-datamodel packages/database/prisma/schema.prisma --shadow-database-url '' --script

@vercel

vercel Bot commented Jun 30, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
grounded-web Ready Ready Preview, Comment Jun 30, 2026 5:18pm

@Hqzdev
Hqzdev merged commit 22a44de into main Jun 30, 2026
10 checks passed
@Hqzdev
Hqzdev deleted the security/auth-hardening branch June 30, 2026 17:21

This branch was successfully deployed

1 active deployment
Preview — 2117067b Deployed Jun 30, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant