5 people 8019c414e1 chore: CSRF protect forgot-password functionality (#22361) ...

* chore: CSRF protect forgot-password functionality

* feat: implement conditional sameSite cookie setting for CSRF tokens

- Use WEBAPP_URL to determine secure cookie settings
- Set sameSite to 'none' for HTTPS environments to support cross-origin scenarios
- Fall back to 'lax' for HTTP development environments
- Follows patterns from PRs #23439 and #23556

Co-Authored-By: alex@cal.com <me@alexvanandel.com>

* update

* change

* NIT

* minor

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: unknown <adhabal2002@gmail.com>
Co-authored-by: Anik Dhabal Babu <81948346+anikdhabal@users.noreply.github.com>

2025-10-01 13:38:29 +00:00

..

forgot-password

chore: when using pii for rate limit (email, ip) hash (#22922)

2025-08-06 13:54:57 +01:00

oauth

feat: add sentry report wrapper to every api route in appDir (#19966)

2025-03-11 23:38:49 -04:00

oidc

chore: Add logging to SAML endpoints (#22968)

2025-08-08 11:50:46 +01:00

reset-password

chore: CSRF protect forgot-password functionality (#22361)

2025-10-01 13:38:29 +00:00

saml

fix: Missing jose module in saml-jackson package (#23291)

2025-08-25 15:36:31 +01:00

setup

refactor: remove @calcom/features dependency from @calcom/prisma (#23820)

2025-09-18 16:40:39 +00:00

signup

refactor: convert getShouldServeCache to CacheService with dependency injection (#22814)

2025-07-31 20:39:27 +03:00

two-factor/totp

perf: import enums from @calcom/prisma/enums (#23582)

2025-09-04 11:44:54 +00:00