 Edouard Vanbelle
|
82bd2e4d22
|
fix(dpop): do not sign GET /... tumbnail/images/ basic assets
no need sign this simole GET to this simplify
an hijacked session could retreive these assets but cannot get the list of them
|
2026-08-09 01:56:08 +02:00 |
|
|
Edouard Vanbelle
|
8d6e03a4bb
|
feat(DPoP): check requests and 401 on failure
|
2026-08-09 01:56:07 +02:00 |
|
|
Edouard Vanbelle
|
5c4354bc67
|
feat(DPoP): add anti replay cache
|
2026-08-09 01:56:07 +02:00 |
|
|
Edouard Vanbelle
|
2e6789e506
|
feat(DPoP): add verification + X-Forwarded-Host X-Forwarded-Proto
|
2026-08-09 01:56:07 +02:00 |
|