ims/app/api at 71cf90e1de475db7d17de9fbef1f5cbc25d1d9f2 - ims

setia/ims

Files

T

adminandClaude Sonnet 4.6 0e479b648f fix(auth,capa): restore auth callback, fix CAPA status update

- auth callback: remove debug redirect, handle both code (PKCE) and
  token_hash+type (recovery/magic link) flows correctly
- capa PATCH: use admin client to bypass RLS for status updates

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WMymkhHZiaYZtUeH9MEHZQ

2026-07-22 19:43:38 +08:00

admin

fix(admin): delete auth user on profile update failure

2026-07-18 18:00:00 +08:00

auth/callback

fix(auth,capa): restore auth callback, fix CAPA status update

2026-07-22 19:43:38 +08:00

capa

fix(auth,capa): restore auth callback, fix CAPA status update

2026-07-22 19:43:38 +08:00

cron

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect