fix: enforce tenant integrity and role-based authorization - #87

Open

rodrigobnogueira wants to merge 12 commits into

mainfrom

fix/tenant-authz-hardening

Commits on Aug 13, 2026

fix(tasks): prove the project and assignee belong to the caller's org
rodrigobnogueira
committed
72bcdd5
feat(auth): authorize mutations with a database-backed RolesGuard
rodrigobnogueira
committed
d0df0f5
fix(auth): pick the active organization deterministically at login
rodrigobnogueira
committed
696c537
fix(config): fail fast on an invalid AUTH_TTL_SECONDS
rodrigobnogueira
committed
89834a4
chore(worker): warn when cross-process cache invalidation is off
rodrigobnogueira
committed
f93cd9b
test: cover cross-tenant task links, the role policy, and login determinism
rodrigobnogueira
committed
1fd9d67
docs: describe the token model, the role policy, and the synchronous hash
rodrigobnogueira
committed
27c273f
fix(auth): resolve the caller from the transport, never the procedure input
rodrigobnogueira
committed
4fce790
fix(auth): re-check the live membership on reads, not just mutations
rodrigobnogueira
committed
fa56bff
fix(onboarding): refuse an invite to an address that already has an account
rodrigobnogueira
committed
4e57f17
refactor(memberships): register the repository once and re-export it
rodrigobnogueira
committed
11ac523
docs: revocation now lands on reads, and an invite cannot attach an account
rodrigobnogueira
committed
0aa0d89