Repository navigation

fix(levelcode): bound the OAuth calls, and ship HSTS + a Secure session cookie - #415

Merged

ndemianc merged 7 commits into

fix/oauth-timeouts-and-cookie-security

Oct 3, 2026

Commits on Aug 16, 2026

fix(levelcode): bound the OAuth calls, and ship HSTS + a Secure session cookie
ndemianc
committed
6095416

Commits on Oct 3, 2026

Merge remote-tracking branch 'origin/develop' into fix/oauth-timeouts-and-cookie-security
ndemianc
committed
b90a1c9
test(levelcode): pin the OAuth HTTP contract against a real socket, not a double
ndemianc
committed
d9b13f7
refactor(levelcode): the OAuth call is one Net::HTTP.start with an options hash
ndemianc
committed
f27de11
fix(levelcode): a timed-out GET was silently retried, doubling the bound it was given
ndemianc
committed
67f120d
fix(levelcode): the OAuth error log names the exception and the call that failed
ndemianc
committed
3410a5a
refactor(config): the SSL options are data, and the spec runs the real middleware
ndemianc
committed
104c37d