CLD-03 follow-up: DB-backed auth codes, PKCE, account linking#812

Merged

Chris0Jeky merged 19 commits intomainfrom

feature/oauth-pkce-account-linking

Apr 12, 2026

Commits on Apr 9, 2026

Add OAuthAuthCode domain entity for DB-backed auth code store
Chris0Jeky
committed
Add IOAuthAuthCodeRepository interface and register in IUnitOfWork
Chris0Jeky
committed
Add OAuthAuthCode infrastructure: EF config, repository, DI, and DbSet
Chris0Jeky
committed
Add EF migration for OAuthAuthCodes table
Chris0Jeky
committed
Replace in-memory auth code store with DB-backed OAuthAuthCode, add account linking
Chris0Jeky
committed
Enable PKCE for GitHub OAuth flow
Chris0Jeky
committed
Add GitHub account linking UI in settings page
Chris0Jeky
committed
Add tests for OAuthAuthCode entity and account linking
Chris0Jeky
committed
Fix auth code concurrency and SQLite compatibility
Chris0Jeky
committed
Fix ProfileSettingsView test to mock vue-router and authApi
Chris0Jeky
committed
Security hardening: validate link mode from OAuth state, fix cleanup scope
Chris0Jeky
committed
Security: bind link codes to initiating user (CSRF fix)
Chris0Jeky
committed
Security: add expiry check to atomic consume, use raw SQL for cleanup
Chris0Jeky
committed
Security: re-issue JWT at exchange, CSRF-bind link codes, uniform errors
Chris0Jeky
committed
Make GenerateJwtToken public for auth code exchange re-issuance
Chris0Jeky
committed
Update OAuthAuthCode tests for CSRF-bound link codes
Chris0Jeky
committed
Use glibc node image for frontend container build
Chris0Jeky
committed
fix(auth): derive OAuth link flow from server-side auth state, not user input
Chris0Jeky
committed

Commits on Apr 12, 2026

Address PR review comments: JSON parsing safety, cancellation token forwarding, returnUrl fix
Chris0Jeky
committed