fix(auth): close CSRF on /auth/email/start + per-IP magic-link rate-limit (P0) - #177

Merged

mastermanas805 merged 7 commits into

fix/auth-csrf-and-rate-limit

May 29, 2026

Commits on May 29, 2026

fix(auth): close CSRF on /auth/email/start + per-IP magic-link rate-limit (P0)

mastermanas805
and
claude
committed
0f7a099
Merge branch 'master' of github.com:InstaNode-dev/api into fix/auth-csrf-and-rate-limit
claude
committed
e1a9676
fix(auth): add agent_action for invalid_content_type (#177)
claude
committed
c2a7fcd
fix(auth): satisfy U3 contract — invalid_content_type agent_action needs https URL
claude
committed
0c8ac0b
fix(auth): remove dead error path in checkPerIPRateLimit (patch coverage)
claude
committed
9a6e305
Merge branch 'master' into fix/auth-csrf-and-rate-limit
mastermanas805
authored
521ced2
merge master into csrf-rate-limit branch (resolve helpers.go + magic_link.go conflicts)
claude
committed
643958d