Skip to content

Fix: JWT callback allows client-controlled email spoofing via session.update() - #80

Merged
shammy911 merged 2 commits into
KavinduSDfrom
copilot/sub-pr-79
Mar 20, 2026
Merged

shammy911 merged 2 commits into
KavinduSDfrom
copilot/sub-pr-79

fix: prevent client-provided email spoofing in JWT callback

466fb52
Select commit
Loading
Failed to load commit list.

Workflow runs completed with no jobs