decolua
8e04fe1734
feat(oauth): zed/trae/windsurf providers + harden callback proxies
- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy
- split oauth providers.js into per-provider files (facade re-export)
- fold 5 standard refresh providers into config-driven generic
- hide trae/windsurf from registry (no tool calling support)
- fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies
via loopback-origin guard + strict state validation + apiOrigins allowlist
- move zed RSA private key transit to POST body; redact proxy logs
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 17:25:19 +07:00
..
2026-07-23 16:34:24 +07:00
2026-04-24 10:04:59 +07:00
2026-06-14 13:15:48 +07:00
2026-06-26 10:51:16 +07:00
2026-07-23 15:37:24 +07:00
2026-07-10 11:41:43 +07:00
2026-06-14 18:49:38 +07:00
2026-07-20 15:39:55 +07:00
2026-07-17 12:09:14 +07:00
2026-05-18 15:23:38 +07:00
2026-07-15 17:34:08 +07:00
2026-07-16 15:33:19 +07:00
2026-06-14 19:31:09 +07:00
2026-03-23 12:03:11 +07:00
2026-07-25 17:25:19 +07:00
2026-07-03 10:58:31 +07:00
2026-07-20 10:55:33 +07:00
2026-06-21 16:51:47 +07:00
2026-05-07 16:42:36 +07:00
2026-06-20 15:09:11 +07:00
2026-06-13 20:40:43 +07:00
2026-06-14 19:31:09 +07:00
2026-06-14 13:15:48 +07:00
2026-05-03 15:21:43 +07:00
2026-07-25 17:25:19 +07:00
2026-06-13 09:55:29 +07:00
2026-07-25 17:25:19 +07:00
2026-06-20 10:09:50 +07:00
2026-07-23 15:37:24 +07:00