Enforce production auth cookie origin config#18

Merged

sidhujag merged 7 commits intomainfrom

hardening/same-origin-auth

Apr 25, 2026

Commits on Apr 25, 2026

harden(auth): enforce production cookie origin config
jagdeep sidhu
committed
fix(auth): normalize production origin guard
jagdeep sidhu
committed
fix(auth): align standalone CORS origin fallback
jagdeep sidhu
committed
test(auth): restore node env safely
jagdeep sidhu
committed
fix(auth): normalize production CORS middleware origin
jagdeep sidhu
committed
fix(auth): prefer explicit secure cookie config
jagdeep sidhu
committed
fix(auth): normalize CORS origin consistently
jagdeep sidhu
committed