sgrant/sdp-request-watcher
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0 Releases 8 Tags

RSS Feed
  • v2.1.0-prod-hotfix 2f137afd5f
    Compare

    Limit sign-in to allowed email domains
    All checks were successful
    Build and push image / build (push) Successful in 13s
    Details

    voidf1sh released this 2026-10-16 01:29:25 +00:00 | -13 commits to main since this release

    Any Zoho account can approve the client, and an outside account got a
    session that returned the .env site, group and technician names.
    ALLOWED_EMAIL_DOMAINS is now required: the callback refuses other
    domains and revokes their token, and every API call re-checks it so
    older cookies stop working. /api/names also makes the caller's token
    read from SDP before returning the shared names.

    Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

    Downloads