Repository navigation

sec(purchase): pin the approval token in the token approve/cancel CAS; compare revoke token first - #1242

Draft

IAmJSD wants to merge 3 commits into

LeanerCloud:mainfrom

IAmJSD:fix/issue-1190

Draft

sec(purchase): pin the approval token in the token approve/cancel CAS; compare revoke token first#1242
IAmJSD wants to merge 3 commits into
LeanerCloud:mainfrom
IAmJSD:fix/issue-1190

Commits on Oct 22, 2026
- sec(config): add a token-pinned atomic cancel for the email-link cancel
  
  IAmJSD
  and
  claude
  committed
  c2d09ab
- sec(purchase): pin the approval token in the token approve claim and token cancel
  
  IAmJSD
  and
  claude
  committed
  b0adbae
- sec(api): compare the revoke token before reporting expiry or a closed window
  
  IAmJSD
  and
  claude
  committed
  756bf24