Security context

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

src/auth/userSignupFields.ts: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Administrative interfaces were exposed to unauthorized users due to a missing layout-level authorization check. Sibling layouts or administrative routing configurations must enforce equivalent access control policies.

Auth Bypass: OAuth signup routines previously granted administrator status based on simple email match rules without validating if the underlying provider email was verified, creating an account-takeover or privilege-escalation vector.

Denial of Service: Allowing unrestricted S3 uploads through unconditioned presigned URLs can lead to disk quota exhaustion or excessive costs. Transitioning to presigned POST fields with content-length constraints mitigates this vector.