wonderwall

mirror of https://github.com/nais/wonderwall.git synced 2026-08-19 19:16:14 +00:00

Files

T

Trong Huu Nguyen b99a00479d fix: annotate reviewed gosec findings

Each finding was reviewed individually; the annotations record why the
flagged code is safe rather than suppressing the rules globally.

- G101: viper configuration keys, not credentials
- G117: the marshalled value is the plaintext input to the encryption
  that immediately follows, or a token endpoint response that is
  required to carry tokens
- G118: the background deletion must outlive the request, so the
  request context deliberately is not used
- G124: cookie attributes are validated in config.Cookie.Validate
- G710: the redirect targets are relative by construction, validated by
  the url validators, or read from the provider's metadata document

2026-07-28 12:52:34 +02:00

data_test.go

fix(session): refresh tokens 30s before expiry instead of 5m

2026-06-10 16:57:54 +02:00

data.go

fix: annotate reviewed gosec findings

2026-07-28 12:52:34 +02:00

id_test.go

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

id.go

refactor: move string generator to crypto package