| .. |
| api-jwt-bearer.ts | Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079) | 4 months ago |
| api-keys.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| api-keys.ts | Add admin Users console page (#1469) | 3 months ago |
| api.ts | Sign out browsers whose session has already ended (#1624) | 2 months ago |
| bearer.ts | Unified provider architecture (#877) | 5 months ago |
| context.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| cookies.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| doc-gate.ts | Serve the cloud console as an SPA with a prerendered shell (#1748) | 2 months ago |
| errors.test.ts | Classify transient WorkOS failures as retryable during MCP auth (#1352) | 4 months ago |
| errors.ts | Classify transient WorkOS failures as retryable during MCP auth (#1352) | 4 months ago |
| handlers.ts | Revert the outbound MCP SDK v2 migration (#1697) | 2 months ago |
| jwks-cache.node.test.ts | Cache JWKS across isolates and serve stale keys on refresh failure (#1665) | 2 months ago |
| jwks-cache.ts | Split the jwt_verify cost into store read vs key import (#1668) | 2 months ago |
| last-org-cookie.ts | Serve the cloud console as an SPA with a prerendered shell (#1748) | 2 months ago |
| login-state.test.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| login-state.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| middleware-live.ts | Preserve URL org scope in cloud auth flows (#1143) | 4 months ago |
| middleware.ts | Unified provider architecture (#877) | 5 months ago |
| org-api-key-auth.node.test.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| org-api-key-mint.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| org-selector-auth.node.test.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| organization.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| request-origin.test.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| request-origin.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| return-to.test.ts | [codex] Fix signed-out OAuth callback recovery (#1061) | 4 months ago |
| return-to.ts | [codex] Fix signed-out OAuth callback recovery (#1061) | 4 months ago |
| route-paths.ts | Render the real shell from the gate's verified identity — delete the full-page skeleton (#986) | 4 months ago |
| user-store.ts | Delete organization from settings (#1340) | 4 months ago |
| workos-auth-provider.ts | Serve tenant-level product reads to organization API keys (#1544) | 3 months ago |
| workos.node.test.ts | Validate WorkOS sessions locally with a cached JWKS (#1376) | 4 months ago |
| workos.ts | Split the jwt_verify cost into store read vs key import (#1668) | 2 months ago |