Block a user
Moderation dashboard: staff dashboard, user history, notes, event capture (Phase 6a + 6b)
whitlocktech
pushed to feature/moderation-dashboard at RunicGateway/website
2026-07-05 20:51:20 +00:00
whitlocktech
deleted branch bugfix/bot-container-port-leak from RunicGateway/website
2026-07-05 15:44:32 +00:00
Fix bot container inheriting site PORT/LOG_FILE from shared .env
Audit and fix Swagger/OpenAPI accuracy; regenerate served spec
whitlocktech
deleted branch bugfix/sso-totp-bypass-31 from RunicGateway/website
2026-07-05 03:34:53 +00:00
[SECURITY AUDIT] SSO login bypasses TOTP two-factor for accounts that have 2FA enabled
Enforce TOTP second factor on SSO login (#31)
whitlocktech
deleted branch bugfix/sso-token-confusion-32 from RunicGateway/website
2026-07-05 02:56:36 +00:00
[SECURITY AUDIT] SSO flow token (sso_tx) validates as a session — token-type confusion in sessionFromDecoded