Repository navigation

v0.27.0: production hardening and billing on payforge - #71

Merged

grokify merged 33 commits into

mainfrom

release/v0.27.0

Oct 29, 2026

Merged

v0.27.0: production hardening and billing on payforge#71
grokify merged 33 commits into
mainfrom
release/v0.27.0

Commits on Oct 28, 2026
- docs(specs): add the production hardening and billing roadmap
  
  grokify
  and
  claude
  committed
  8cd6533
- fix(systemauth): exchange each authorization code and refresh token once
  
  grokify
  and
  claude
  committed
  d94d342
- fix(systemauth): link sign-ins by email only when the provider owns the address
  
  grokify
  and
  claude
  committed
  f5ba501
- docs: add the security policy
  
  grokify
  and
  claude
  committed
  ad689bc
- docs(security): add the production checklist
  
  grokify
  and
  claude
  committed
  f439c79
- feat(systemauth): add production waivers and a per-request production policy
  
  grokify
  and
  claude
  committed
  852ae8f
- feat(systemauthsvc): fail closed on the HMAC secret, bearer clients and replay cache
  
  grokify
  and
  claude
  committed
  74f8f52
- feat(appauth): warn when DPoP proofs use a per-instance replay cache
  
  grokify
  and
  claude
  committed
  3b1b26d
- test: cover production checks, waivers and the replay cache warning
  
  grokify
  and
  claude
  committed
  67feabf
- docs: document production checks, waivers and dpop.single_instance
  
  grokify
  and
  claude
  committed
  0314b62
- feat(systemauth): set security headers on every response
  
  grokify
  and
  claude
  committed
  d49cd53
- test(systemauth): assert security headers on every page
  
  grokify
  and
  claude
  committed
  9a508ff
- docs(systemauth): document the security headers
  
  grokify
  and
  claude
  committed
  0631cb0
- test(scim): link provisioned users only on authoritative sign-ins
  
  grokify
  and
  claude
  committed
  ee8a640
- docs(security): name the production checks' keys and waivers
  
  grokify
  and
  claude
  committed
  32b5d63
- feat(billing): add the payforge store and a cross-instance lock
  
  grokify
  and
  claude
  committed
  4f4b6a5
- feat(billing): add the payment webhook handler
  
  grokify
  and
  claude
  committed
  47e2546
- feat(billing): apply plans, sales, refunds, disputes and sellers
  
  grokify
  and
  claude
  committed
  5fc3fbc
- feat(billing): add checkout and customer-portal handlers
  
  grokify
  and
  claude
  committed
  67e08b6
- refactor(marketplace)!: remove marketplace/stripe in favor of billing
  
  grokify
  and
  claude
  committed
  d5e6d5b
- chore(deps): build against the local payforge checkout
  
  grokify
  and
  claude
  committed
  ccf0f10
- fix(marketplace): keep a past-due subscription's plan during payment retries
  
  grokify
  and
  claude
  committed
  03abe3b
- docs(release): add v0.27.0 changelog and release notes
  
  grokify
  and
  claude
  committed
  732a9cc
- docs(specs): mark the v0.27.0 roadmap items done
  
  grokify
  and
  claude
  committed
  6bf7871
- docs(systemauth): describe linking by authoritative email
  
  grokify
  and
  claude
  committed
  d804b4b
- fix(billing): accept loopback redirect URLs only with a test-mode key
  
  grokify
  and
  claude
  committed
  b906d66
- build(deps): depend on payforge v0.1.0
  
  grokify
  and
  claude
  committed
  bfbb454
- fix(relyingparty): accept cookie uploads from an allowed origin
  
  grokify
  and
  claude
  committed
  f59dd02
- feat(relyingparty): add BFF.SignOut for handlers with their own sign-out
  
  grokify
  and
  claude
  committed
  fb08960
- feat(relyingparty): redirect failed sign-ins to the app's sign-in page
  
  grokify
  and
  claude
  committed
  69ce7a4
Commits on Oct 29, 2026
- docs(release): list the production settings and the BFF additions in v0.27.0
  
  grokify
  and
  claude
  committed
  56dd844
- test(systemauth): configure the production settings in the Postgres restart test
  
  grokify
  and
  claude
  committed
  c8f6564
- fix(billing): log the matched route instead of the request path
  
  grokify
  and
  claude
  committed
  e3ceb4d

Commits

Commits on Oct 28, 2026

Commits on Oct 29, 2026