This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Paperclip 1380d5a9d3 feat(GRO-564): Better Auth Phase 2 security hardening ...

- Add logout button to admin layout header (signOut from better-auth)
- AUTH_DISABLED production guard already present in auth.ts middleware
- Remove automatic email-based staff-user linking (security fix)
- Add PATCH /api/staff/:id/link-user endpoint for manual linking by admins
- Add rate limiting to Better Auth (10 req/min, database storage)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-11 22:53:00 +00:00

..

api

feat(GRO-564): Better Auth Phase 2 security hardening

2026-04-11 22:53:00 +00:00

e2e

fix(e2e): use domcontentloaded instead of networkidle in admin invoices test

2026-04-11 16:50:35 +00:00

groombook/overlays/uat

fix(GRO-451): re-seal UAT secrets with correct cluster certificate

2026-04-04 12:27:23 +00:00

web

feat(GRO-564): Better Auth Phase 2 security hardening

2026-04-11 22:53:00 +00:00