fix(chat): close SSO auth bypass via checkSSOAccess body flag#4408

Merged

waleedlatif1 merged 3 commits into

waleedlatif1/security-review

May 2, 2026

Commits on May 2, 2026

fix(chat): close SSO auth bypass via checkSSOAccess body flag
waleedlatif1
committed
fix(chat): cast allowedEmails to string[] for SSO eligibility check
waleedlatif1
committed
fix(chat): close SSO GET cookie replay and add eligibility rate limit
waleedlatif1
committed