Repository navigation

feat(security): Phase 2 opaque token architecture - #187

Merged

2witstudios merged 8 commits into

feat/phase2-opaque-tokens

Jan 13, 2026

Commits on Jan 13, 2026
- feat(security): Phase 2 opaque token architecture
  
  2witstudios
  and
  claude
  committed
  6f89746
- fix(processor): use consistent auth error message in ingest.ts
  
  2witstudios
  and
  claude
  committed
  47524f5
- fix(security): add bounds validation to service token duration
  
  2witstudios
  and
  claude
  committed
  d6a4d0e
- fix(security): reject non-service tokens in processor + fix test isolation
  
  2witstudios
  and
  claude
  committed
  38d0ec4
- fix(tests): improve notifications.test.ts test isolation
  
  2witstudios
  and
  claude
  committed
  55ddfce
- fix(security): add HMAC signature to notification broadcasts + code review cleanup
  
  2witstudios
  and
  claude
  committed
  bface73
- fix(tests): improve notification test isolation for CI
  
  2witstudios
  and
  claude
  committed
  459f03b
- fix(tests): use aggressive cleanup in notifications test
  
  2witstudios
  and
  claude
  committed
  a0b8a18