fix(security): harden auth endpoints against NoSQL injection and add JWT warning#3268

Merged

PierreBrisorgueil merged 3 commits into

fix/security-hardening

Mar 18, 2026

Commits on Mar 18, 2026

fix(security): harden auth endpoints against NoSQL injection and add JWT warning
PierreBrisorgueil
committed
fix(users): remove overly aggressive search validation that broke internal queries
PierreBrisorgueil
committed
fix(config): add JSDoc to validateJwtSecret helper
PierreBrisorgueil
committed