decolua
8e04fe1734
feat(oauth): zed/trae/windsurf providers + harden callback proxies
- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy
- split oauth providers.js into per-provider files (facade re-export)
- fold 5 standard refresh providers into config-driven generic
- hide trae/windsurf from registry (no tool calling support)
- fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies
via loopback-origin guard + strict state validation + apiOrigins allowlist
- move zed RSA private key transit to POST body; redact proxy logs
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 17:25:19 +07:00
..
2026-06-13 11:40:35 +07:00
2026-07-20 12:08:58 +07:00
2026-07-10 17:32:45 +07:00
2026-07-10 13:08:58 +07:00
2026-07-10 16:05:07 +07:00
2026-07-25 17:25:19 +07:00
2026-07-10 16:10:42 +07:00
2026-06-14 13:15:48 +07:00
2026-07-23 16:22:47 +07:00
2026-05-09 22:48:07 +07:00
2026-05-10 21:56:40 +07:00
2026-06-26 10:22:20 +07:00
2026-06-08 09:43:45 +07:00
2026-05-09 17:48:20 +07:00
2026-07-19 13:35:38 +07:00
2026-05-09 17:48:20 +07:00
2026-05-10 21:56:40 +07:00
2026-05-21 11:33:18 +07:00
2026-07-10 13:08:58 +07:00
2026-05-09 17:48:20 +07:00