fix(migrate): refuse a bundle that claims another app's audience (H15) - #62

Merged

alghanim merged 4 commits into

bodaay:masterfrom

alghanim:fix/migrate-audience-takeover

Aug 9, 2026

Commits on Aug 8, 2026

fix(oidc): carry the full authorize request through the login-error redirect (H13)

Your Name
and
claude
committed
44655de
fix(store): retract the reverse-index claim on a mapping re-point (H14, M38)

Your Name
and
claude
committed
164da3f
fix(auth): refuse to create a local password on a directory-backed user (SA-7)

Your Name
and
claude
committed
5f9cbe4
fix(migrate): refuse a bundle that claims another app's audience (H15)

Your Name
and
claude
committed
cecdc2d