fix(auth): eliminate recurring login + mid-chat captcha (cookie persistence, WAF-warm requests, silent refresh) - #40

Open

razkumar2001 wants to merge 6 commits into

youssefvdel:mainfrom

razkumar2001:fix/captcha-auth-hardening

Commits on Jun 26, 2026

fix(auth): kill re-login captcha via cookie merge + token persistence

razkumar2001
and
claude
committed
fix(auth): silent profile refresh + real JWT TTL + lock/session fixes

razkumar2001
and
claude
committed
fix(auth): kill login storm via fail-throttle + cluster stagger

razkumar2001
and
claude
committed
fix(waf): harden steady-state captcha triggers

razkumar2001
and
claude
committed
fix(auth): bound hard-disable + stop 403 over-throttle (reverify findings)

razkumar2001
and
claude
committed
fix(auth): harvest baxia cookies on every login path + reap orphan chromes

razkumar2001
and
claude
committed