Repository navigation

sec(purchase): pin the approval token in the token approve/cancel CAS; compare revoke token first - #1242

Merged

cristim merged 4 commits into

LeanerCloud:mainfrom

IAmJSD:fix/issue-1190

Oct 25, 2026

Merged

sec(purchase): pin the approval token in the token approve/cancel CAS; compare revoke token first#1242
cristim merged 4 commits into
LeanerCloud:mainfrom
IAmJSD:fix/issue-1190

Commits on Oct 22, 2026
- sec(config): add a token-pinned atomic cancel for the email-link cancel
  
  IAmJSD
  and
  claude
  committed
  c2d09ab
- sec(purchase): pin the approval token in the token approve claim and token cancel
  
  IAmJSD
  and
  claude
  committed
  b0adbae
- sec(api): compare the revoke token before reporting expiry or a closed window
  
  IAmJSD
  and
  claude
  committed
  756bf24
Commits on Oct 25, 2026
- Merge remote-tracking branch 'origin/main' into fix/issue-1190
  
  IAmJSD
  and
  claude
  committed
  5895ce7