Extract/response/error layer cleanup: garde, auth redesign, IP recording - #289

Merged

martsokha merged 13 commits into

mainfrom

chore/extract-cleanup-and-tests

Sep 9, 2026

Commits on Sep 9, 2026

Redesign auth extractors, harden reject extractors, add extract tests

martsokha
and
claude
committed
bd14bd0
Migrate validation from validator to garde; regroup into extract/valid

martsokha
and
claude
committed
47dc1a7
Make ErrorKind the single source of truth; slim Error and ErrorResponse

martsokha
and
claude
committed
59bffec
Review extract/ root: delete two footgun extractors, wire client-IP recording

martsokha
and
claude
committed
2bec755
Redesign auth flow: extractors in, IntoResponse out, one issuer

martsokha
and
claude
committed
0893877
Address PR review: optional-body propagation, 413, redaction, non-blank, nested inner

martsokha
and
claude
committed
eac1c4a
Group response types: response/auth/session, response/sse

martsokha
and
claude
committed
0191e7f
Rewrite READMEs without em-dashes; note CLIENT_IP_SOURCE/COOKIE_SECURE

martsokha
and
claude
committed
0dea1ac
Split Avatar into AvatarUpload (extract) and AvatarImage (response)

martsokha
and
claude
committed
d7bb80b
Address PR review: JWT exp leeway, CSRF-protect logout

martsokha
and
claude
committed
38f213a
Move download + redirect response behavior into crate::response

martsokha
and
claude
committed
bbfa40a
Extract OIDC account provisioning into an AccountProvisioner service

martsokha
and
claude
committed
52c3a57
Address PR review: browser-safe OAuth fallback, safe download filenames

martsokha
and
claude
committed
66378ad