fix(security): close protected billing and identity trust gaps - #589

Closed

seonghobae wants to merge 32 commits into

developfrom

fix/stripe-webhook-trust-develop-488

Commits on Aug 23, 2026

test: reproduce unsigned Stripe webhook plan escalation
seonghobae
committed
ba7554e
fix: authenticate Stripe webhooks before entitlement handling
seonghobae
committed
042830d
test(billing): keep Stripe webhook behind abuse controls
seonghobae
committed
cc0c6ed
fix(billing): keep Stripe verification inside app controls
seonghobae
committed
1f5c2b2
test(ci): align public-route contract with Stripe repair
seonghobae
committed
4488ab9
fix(billing): retire unsigned Stripe plan-upgrade handler
seonghobae
committed
dce2424
test(server): prove toast route is unique
seonghobae
committed
5e30072
test(a11y): exercise shipped toast asset route
seonghobae
committed
4ae65a6
test(security): bind invites to intended identity
seonghobae
committed
87d34bd
fix(security): bind invite redemption to email
seonghobae
committed
eaab3f8
test(ci): match secured route composition
seonghobae
committed
5dc72e7
test(security): fail closed when OIDC is unconfigured
seonghobae
committed
a1ad3bc
fix(security): require explicit development for mock OIDC
seonghobae
committed
7b19b86
ci: run owned-production coverage in server gate
seonghobae
committed
2d39860
test(security): require invite safety in protected route graph
seonghobae
committed
77406a9
test(security): cover shared OIDC fail-closed boundary
seonghobae
committed
d611894
fix(security): secure shared application boundary
seonghobae
committed
7c1f08c
fix(security): align OIDC regression and trust docs
seonghobae
committed
394e3cc
test(security): expose invite core bypass regression
seonghobae
committed
7ef64d2
test(security): bind invite guard to live sessions
seonghobae
committed
36c1037
fix(security): reject revoked sessions before invite binding
seonghobae
committed
bc50cc9
test(security): keep guard rejections behind abuse controls
seonghobae
committed
40eb4d1
test(security): register guard abuse-control regression
seonghobae
committed
ab7c7fe
fix(security): account rejected guards in abuse controls
seonghobae
committed
72f6acc
test(stripe): preserve literal signature timestamp
seonghobae
committed
de0a053
fix(stripe): verify literal signed timestamp
seonghobae
committed
131d79e
test(security): preserve guard rejection method evidence
seonghobae
committed
cf67f2a
fix(observability): retain original guard request method
seonghobae
committed
177996e
fix(observability): carry original guard method safely
seonghobae
committed
04363c0
test(security): require core OIDC fail-closed
seonghobae
committed
25b95ed
test(security): require core invite fail-closed behavior
seonghobae
committed
5807225
fix(security): harden internal invite and OIDC boundaries
seonghobae
committed
03cbe9f

Navigation Menu

fix(security): close protected billing and identity trust gaps - #589

fix(security): close protected billing and identity trust gaps#589
seonghobae wants to merge 32 commits into
developfrom
fix/stripe-webhook-trust-develop-488

Commits on Aug 23, 2026

test: reproduce unsigned Stripe webhook plan escalation

fix: authenticate Stripe webhooks before entitlement handling

test(billing): keep Stripe webhook behind abuse controls

fix(billing): keep Stripe verification inside app controls

test(ci): align public-route contract with Stripe repair

fix(billing): retire unsigned Stripe plan-upgrade handler

test(server): prove toast route is unique

test(a11y): exercise shipped toast asset route

test(security): bind invites to intended identity

fix(security): bind invite redemption to email

test(ci): match secured route composition

test(security): fail closed when OIDC is unconfigured

fix(security): require explicit development for mock OIDC

ci: run owned-production coverage in server gate

test(security): require invite safety in protected route graph

test(security): cover shared OIDC fail-closed boundary

fix(security): secure shared application boundary

fix(security): align OIDC regression and trust docs

test(security): expose invite core bypass regression

test(security): bind invite guard to live sessions

fix(security): reject revoked sessions before invite binding

test(security): keep guard rejections behind abuse controls

test(security): register guard abuse-control regression

fix(security): account rejected guards in abuse controls

test(stripe): preserve literal signature timestamp

fix(stripe): verify literal signed timestamp

test(security): preserve guard rejection method evidence

fix(observability): retain original guard request method

fix(observability): carry original guard method safely

test(security): require core OIDC fail-closed

test(security): require core invite fail-closed behavior

fix(security): harden internal invite and OIDC boundaries