Bind operator mode to a canonical public origin #610

Merged

rockachopa merged 1 commits from timmy/609-canonical-public-origin into main 2026-08-12 01:57:07 +00:00

Conversation 0 Commits 1 Files Changed 6

+138 -7

rockachopa commented 2026-08-12 01:55:12 +00:00

Member

Copy link

Copy source

Closes #609

Requires an explicit canonical HTTPS origin in operator mode, rejects foreign Host values before authentication, derives CSRF and passkey defaults from that trust boundary, and emits HSTS.

TDD: focused 59 passed; full suite 1267 passed.

Closes #609 Requires an explicit canonical HTTPS origin in operator mode, rejects foreign Host values before authentication, derives CSRF and passkey defaults from that trust boundary, and emits HSTS. TDD: focused 59 passed; full suite 1267 passed.

rockachopa added 1 commit 2026-08-12 01:55:12 +00:00

feat: bind operator mode to public origin (Closes #609) 8ea46974ff

rockachopa merged commit 4faf0447be into main 2026-08-12 01:57:07 +00:00

rockachopa referenced this issue from a commit 2026-08-12 01:57:08 +00:00

Merge pull request 'Bind operator mode to a canonical public origin' (#610) from timmy/609-canonical-public-origin into main

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

P0

Drop everything

P1

High priority

P2

Medium priority

agent:nightprowl

Assignments routed to the LongCat NightProwl evaluation worker

backend

Backend service

ci

Continuous integration / actions

frontend

Frontend / UI

meta

Meta / planning

pages

Gitea Pages

template

Repo template / standards

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

nightprowl timmy (Timmy · the Wizard Mind) turdbot zephyrus-sparkborn (Zephyrus Sparkborn)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#610