镜像站点 · 本页由第三方 GitHub 只读镜像提供，非 GitHub 官方站点，不接受任何登录或凭据输入。前往 github.com

Repository navigation

feat(auth): harden authentication and session security - #3

Open

Johnny-Yip wants to merge 1 commit into

humanAgencyLab:mainfrom

Johnny-Yip:feature/auth-improvements

Open

feat(auth): harden authentication and session security#3
Johnny-Yip wants to merge 1 commit into
humanAgencyLab:mainfrom
Johnny-Yip:feature/auth-improvements

Johnny-Yip commented Oct 11, 2026 •

edited

Loading

Base repository:
humanAgencyLab/learning-w-LLMs

Base branch:
main

Head repository:
Johnny-Yip/learning-w-LLMs

Compare branch:
feature/auth-improvements

Summary

Implemented Phase 1 authentication security improvements.

Changes

Hardened JWT configuration and validation
Added MongoDB-backed token revocation
Improved login, logout, and password security
Secured password reset handling
Implemented cross-tab authentication coordination
Added authentication regression tests

Testing

39 backend tests passed
28 frontend tests passed
No remaining P0-P2 findings in the final review

Deployment Notes

Requires a valid JWT_SECRET
Existing users must sign in again
Self-service password recovery remains disabled
Logout invalidates all account sessions


          feat(auth): harden authentication and session security

6ff8ab1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet