Improve cookie authentication tokens#805

Open

markstory wants to merge 3 commits into

4.xfrom

improve-cookie-token-jorge

Commits on Jul 4, 2026

security: replace unencrypted cookie auth tokens with verified, work-factor-bounded HMAC-SHA256 tokens

steinkel
authored and
markstory
committed

Commits on Jul 5, 2026

Apply rector changes
markstory
committed

Commits on Jul 7, 2026

Fix formatting :|
markstory
committed