Repository navigation

hotfix: close production bleed-through and dashboard auth gaps - #2

Merged

Namnarak merged 21 commits into

mainfrom

hotfix/security-2026-09-07

Sep 7, 2026

Merged

hotfix: close production bleed-through and dashboard auth gaps#2
Namnarak merged 21 commits into
mainfrom
hotfix/security-2026-09-07

Commits on Sep 7, 2026
- hotfix: add fail-closed dashboard auth middleware
  Namnarak
  committed
  ab459df
- hotfix: install dashboard security middleware
  Namnarak
  committed
  c8a4a64
- hotfix: attach Discord bearer token to dashboard API calls
  Namnarak
  committed
  3a97cd0
- hotfix: inject dashboard auth bootstrap at Cloudflare edge
  Namnarak
  committed
  15a91fd
- hotfix: remove hardcoded backend and verify checkout identity
  Namnarak
  committed
  98f4756
- hotfix: disable unauthenticated realtime gateway
  Namnarak
  committed
  33a35d9
- hotfix: make recommendation backend deployer-configured
  Namnarak
  committed
  0965eed
- hotfix: remove Cyori identity defaults from Community config
  Namnarak
  committed
  db18f9b
- hotfix: load Community runtime client identity
  Namnarak
  committed
  edb3cb5
- hotfix: expose safe Community runtime client ID
  Namnarak
  committed
  2ac73ec
- hotfix: expose runtime identity before dashboard auth
  Namnarak
  committed
  cbe37ae
- hotfix: serve deployer-configured Community client ID
  Namnarak
  committed
  d93e908
- hotfix: remove Cyori OAuth defaults and auto-join
  Namnarak
  committed
  24f5f90
- hotfix: prevent empty Mongo selectors from mutating user documents
  Namnarak
  committed
  690c011
- hotfix: remove Cyori invite and support-server auto-join
  Namnarak
  committed
  f709beb
- hotfix: prevent stale Cyori links from escaping Community deployment
  Namnarak
  committed
  7157a1b
- hotfix: force empty Mongo reads to resolved root document
  Namnarak
  committed
  30cbb6d
- hotfix: enforce Manage Guild on DJ and vote settings
  Namnarak
  committed
  c5529c4
- hotfix: install sensitive command permission guard
  Namnarak
  committed
  32b356b
- ci: add JavaScript syntax checks
  Namnarak
  committed
  7975717
- hotfix: return only mutual guilds to authenticated users
  Namnarak
  committed
  041da9f

Commits

Commits on Sep 7, 2026