| .. |
| access-token-options.ts | Stop capping WorkOS access token age at 24 hours (#2009) | 1 month ago |
| api-jwt-bearer.ts | Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079) | 4 months ago |
| api-keys.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| api-keys.ts | Revert "Cache api key validations per isolate (#1864)" (#1870) | 2 months ago |
| api.ts | Harden OAuth sessions and patch vulnerable dependencies (#2000) | 1 month ago |
| bearer.ts | Unified provider architecture (#877) | 5 months ago |
| context.ts | MCP session cold init resilience (#1787) | 2 months ago |
| cookies.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| doc-gate.ts | Serve the cloud console as an SPA with a prerendered shell (#1748) | 2 months ago |
| errors.test.ts | Classify transient WorkOS failures as retryable during MCP auth (#1352) | 4 months ago |
| errors.ts | MCP session cold init resilience (#1787) | 2 months ago |
| handlers.ts | Restart hosted invitation logins with fresh state (#2023) | 1 month ago |
| jwks-cache.node.test.ts | Cache JWKS across isolates and serve stale keys on refresh failure (#1665) | 2 months ago |
| jwks-cache.ts | Split the jwt_verify cost into store read vs key import (#1668) | 2 months ago |
| last-org-cookie.ts | Serve the cloud console as an SPA with a prerendered shell (#1748) | 2 months ago |
| login-state.test.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| login-state.ts | Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975) | 5 months ago |
| middleware-live.ts | Preserve URL org scope in cloud auth flows (#1143) | 4 months ago |
| middleware.ts | Unified provider architecture (#877) | 5 months ago |
| org-api-key-auth.node.test.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| org-api-key-mint.node.test.ts | Add admin Users console page (#1469) | 3 months ago |
| org-selector-auth.node.test.ts | Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623) | 2 months ago |
| organization.ts | Restrict workspace writes to admins (#1919) | 2 months ago |
| request-origin.test.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| request-origin.ts | Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974) | 4 months ago |
| return-to.test.ts | Normalize login return destinations (#2002) | 1 month ago |
| return-to.ts | Normalize login return destinations (#2002) | 1 month ago |
| route-paths.ts | Render the real shell from the gate's verified identity — delete the full-page skeleton (#986) | 4 months ago |
| user-store-error.node.test.ts | MCP session cold init resilience (#1787) | 2 months ago |
| user-store.ts | Delete organization from settings (#1340) | 4 months ago |
| workos-auth-provider.ts | Restrict workspace writes to admins (#1919) | 2 months ago |
| workos-callback-state.node.test.ts | Restart hosted invitation logins with fresh state (#2023) | 1 month ago |
| workos.node.test.ts | Validate WorkOS sessions locally with a cached JWKS (#1376) | 4 months ago |
| workos.ts | Harden OAuth sessions and patch vulnerable dependencies (#2000) | 1 month ago |