Colby Whitlock whitlocktech
0 Followers · 0 Following
  • United States
  • Joined on 2025-08-15
Repositories
6
 Projects Packages Public Activity Starred Repositories
whitlocktech merged pull request RunicGateway/website#41 2026-07-05 05:40:31 +00:00
Fix bot container inheriting site PORT/LOG_FILE from shared .env
whitlocktech approved RunicGateway/website#41 2026-07-05 05:40:25 +00:00
Fix bot container inheriting site PORT/LOG_FILE from shared .env
whitlocktech pushed to main at RunicGateway/website 2026-07-05 04:33:39 +00:00
20d3fbf594 Merge pull request 'Audit and fix Swagger/OpenAPI accuracy; regenerate served spec' (#40) from docs/swagger-audit into main
f8db61025b Audit and fix Swagger/OpenAPI accuracy; regenerate served spec
Compare 2 commits »
whitlocktech deleted branch docs/swagger-audit from RunicGateway/website 2026-07-05 04:33:39 +00:00
whitlocktech merged pull request RunicGateway/website#40 2026-07-05 04:33:38 +00:00
Audit and fix Swagger/OpenAPI accuracy; regenerate served spec
whitlocktech approved RunicGateway/website#40 2026-07-05 04:33:27 +00:00
Audit and fix Swagger/OpenAPI accuracy; regenerate served spec
whitlocktech deleted branch bugfix/sso-totp-bypass-31 from RunicGateway/website 2026-07-05 03:34:53 +00:00
whitlocktech closed issue RunicGateway/website#31 2026-07-05 03:34:52 +00:00
[SECURITY AUDIT] SSO login bypasses TOTP two-factor for accounts that have 2FA enabled
whitlocktech pushed to main at RunicGateway/website 2026-07-05 03:34:52 +00:00
2067028070 Merge pull request 'Enforce TOTP second factor on SSO login (#31)' (#39) from bugfix/sso-totp-bypass-31 into main
03e62b56ad Enforce TOTP second factor on SSO login (#31)
Compare 2 commits »
whitlocktech merged pull request RunicGateway/website#39 2026-07-05 03:34:51 +00:00
Enforce TOTP second factor on SSO login (#31)
whitlocktech approved RunicGateway/website#39 2026-07-05 03:34:45 +00:00
Enforce TOTP second factor on SSO login (#31)
whitlocktech deleted branch bugfix/sso-token-confusion-32 from RunicGateway/website 2026-07-05 02:56:36 +00:00
whitlocktech pushed to main at RunicGateway/website 2026-07-05 02:56:35 +00:00
15cf8ea286 Merge pull request 'Fix SSO flow-token / session type confusion (#32)' (#38) from bugfix/sso-token-confusion-32 into main
5f62eccdd8 Fix SSO flow-token / session type confusion (#32)
Compare 2 commits »
whitlocktech merged pull request RunicGateway/website#38 2026-07-05 02:56:34 +00:00
Fix SSO flow-token / session type confusion (#32)
whitlocktech closed issue RunicGateway/website#32 2026-07-05 02:56:34 +00:00
[SECURITY AUDIT] SSO flow token (sso_tx) validates as a session — token-type confusion in sessionFromDecoded
whitlocktech approved RunicGateway/website#38 2026-07-05 02:56:27 +00:00
Fix SSO flow-token / session type confusion (#32)
whitlocktech deleted branch bugfix/session-revocation-30 from RunicGateway/website 2026-07-05 02:08:19 +00:00
whitlocktech closed issue RunicGateway/website#30 2026-07-05 02:08:18 +00:00
[SECURITY AUDIT] Session/token revocation is a non-functional stub — logout and password change do not invalidate existing JWTs
whitlocktech pushed to main at RunicGateway/website 2026-07-05 02:08:18 +00:00
e8a54d9ff7 Merge pull request 'Implement web session/token revocation (#30)' (#37) from bugfix/session-revocation-30 into main
933206a1b8 Implement web session/token revocation (#30)
Compare 2 commits »
whitlocktech merged pull request RunicGateway/website#37 2026-07-05 02:08:17 +00:00
Implement web session/token revocation (#30)