Issues

Issues

• fix: close Node adapter parity gaps with Go, Python and Rust

  fells-code/seamless-auth-server#288 · opened on Nov 10, 2026 · v0.24
  1

• fix: low severity Node adapter hardening (review bundle 4)

  fells-code/seamless-auth-server#287 · opened on Nov 10, 2026 · v0.24

• ci(prerelease): gate npm prerelease publishing behind a protected environment

  fells-code/seamless-auth-server#286 · opened on Nov 10, 2026 · v0.24

• fix(core): handle concurrent refreshes across instances

  fells-code/seamless-auth-server#285 · opened on Nov 10, 2026 · v0.24
  1

• fix(express,fastify): verify guard claims against JWKS instead of trusting the cookie payload

  fells-code/seamless-auth-server#284 · opened on Nov 10, 2026 · v0.24

• fix(csrf): require Origin to match Host without an allow-list and default to SameSite=Lax

  fells-code/seamless-auth-server#283 · opened on Nov 10, 2026 · v0.24
  1

• feat: store the raw access token in the session cookie so tokens can carry more claims

  fells-code/seamless-auth-server#278 · opened on Nov 8, 2026 · v1.0

• refactor(core): share the console proxy path checks across adapters

  fells-code/seamless-auth-server#189 · opened on Oct 6, 2026 · v1.0