Skip to content

fix: add database persistence for OAuth2, refresh token expiry, incid… - #1173

Merged
Mystery-CLI merged 1 commit into
Ethereal-Future:mainfrom
Hahfyeex:fix/security-issues-965-968
Aug 26, 2026
Merged

Mystery-CLI merged 1 commit into
Ethereal-Future:mainfrom
Hahfyeex:fix/security-issues-965-968

Conversation

@Hahfyeex

Copy link
Copy Markdown
Contributor

…ent storage, and DAST scanning

  • Add Prisma models for OAuth2 (clients, tokens, authorization codes)
  • Replace in-memory Maps with database persistence in oauth2.js
  • Add 90-day expiry for refresh tokens with validation
  • Add revokeRefreshToken() and cleanupExpired() methods
  • Add Prisma models for security incidents (incidents, actions, notes)
  • Replace in-memory Map and JSON files with database in incidentResponse.js
  • Add DAST job to security-pipeline.yml using OWASP ZAP scanner
  • Update security-gate to include DAST validation

Fixes #968 (OAuth2 persistence)
Fixes #967 (refresh token expiry)
Fixes #966 (incident response persistence)
Fixes #965 (DAST integration)

…ent storage, and DAST scanning

- Add Prisma models for OAuth2 (clients, tokens, authorization codes)
- Replace in-memory Maps with database persistence in oauth2.js
- Add 90-day expiry for refresh tokens with validation
- Add revokeRefreshToken() and cleanupExpired() methods
- Add Prisma models for security incidents (incidents, actions, notes)
- Replace in-memory Map and JSON files with database in incidentResponse.js
- Add DAST job to security-pipeline.yml using OWASP ZAP scanner
- Update security-gate to include DAST validation

Fixes Ethereal-Future#968 (OAuth2 persistence)
Fixes Ethereal-Future#967 (refresh token expiry)
Fixes Ethereal-Future#966 (incident response persistence)
Fixes Ethereal-Future#965 (DAST integration)
@drips-wave

drips-wave Bot commented Aug 25, 2026

Copy link
Copy Markdown

@Hahfyeex Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Mystery-CLI
Mystery-CLI merged commit 9d8edbe into Ethereal-Future:main Aug 26, 2026
7 of 44 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment