fix(security): audit quick fixes — V2, V3, V13, V14, V15, V16 - #15

Merged

NicolasRitouet merged 7 commits into

mainfrom

security/audit-quick-fixes

Apr 9, 2026

Commits on Apr 9, 2026

fix(backend): stop logging token preview in auth middleware (V2)

NicolasRitouet
and
claude
committed
fix(backend): require authentication on /v1/github/repo-ids (V3)

NicolasRitouet
and
claude
committed
fix(backend): remove secret name enumeration from error messages (V13)

NicolasRitouet
and
claude
committed
fix(backend): return generic error in Stripe webhook response (V14)

NicolasRitouet
and
claude
committed
fix(dashboard): disable sendDefaultPii in all Sentry configs (V15)

NicolasRitouet
and
claude
committed
fix(dashboard): map auth callback errors to predefined messages (V16)

NicolasRitouet
and
claude
committed
fix(dashboard): normalize auth error code before sending to analytics

NicolasRitouet
and
claude
committed