Repository navigation

fix findings from the casa security self-check - #86

Closed

hkonsti wants to merge 6 commits into

mainfrom

hkonsti/google-7-security

Closed

fix findings from the casa security self-check#86
hkonsti wants to merge 6 commits into
mainfrom
hkonsti/google-7-security

Commits on Oct 14, 2026
- stop storing the tokens google sign-in returns
  hkonsti
  committed
  7b51fa2
- send security headers on every api response
  hkonsti
  committed
  67d61be
- send the same security headers from the docs and the website
  hkonsti
  committed
  c47af6f
- pin the aes-gcm tag length when decrypting secrets
  hkonsti
  committed
  70050ed
- refuse a basic header that does not decode instead of failing the token request
  hkonsti
  committed
  83c0ca3
- take only a tool's own params, not names every object inherits
  hkonsti
  committed
  3bde8f5