Security context

Highlights

Auth Bypass: 133 prior fixes. Scrutinize any change in this area.

src/server/middleware/v2auth/auth.go: most-fixed (6 issues). Treat as high-risk during review.

115 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Insecure token validation allowed bearer token authorization bypasses via missing IAT checks or validation against incorrect projects. This is mitigated by explicitly validating IAT against both token issuance logic and project creation times.

Auth Bypass: Flaws in permission check consolidation when creating or updating robot accounts allowed privilege escalation, enabling accounts to assign themselves or other robots higher permissions than they possessed.

Auth Bypass: LDAP authentication could be bypassed completely using empty usernames (anonymous bind) or by triggering logic errors that treated authentication failures as successful logins rather than unauthorized states.