feat(graphql-server): Cookie Lifecycle & CSRF Enforcement#1041

Open

theothersideofgod wants to merge 12 commits into

mainfrom

feat/server-auth-cookie-csrf

Commits on May 7, 2026

feat(graphql-server): add AuthSettings type and cookie helpers

theothersideofgod
and
claude
committed
feat(graphql-server): add auth-cookie middleware for session management

theothersideofgod
and
claude
committed
feat(graphql-server): load AuthSettings from tenant database

theothersideofgod
and
claude
committed
feat(graphql-server): wire CSRF and auth-cookie middleware

theothersideofgod
and
claude
committed
test(graphql-server): add cookie and auth-cookie unit tests

theothersideofgod
and
claude
committed
test(graphql-server): add CSRF middleware unit tests

theothersideofgod
and
claude
committed
fix(types): add enableCaptcha to AuthSettings interface

theothersideofgod
and
claude
committed
refactor(graphql-server): replace auth-cookie middleware with grafserv plugin

theothersideofgod
and
claude
committed
test(graphql-server): add AuthCookiePlugin unit tests

theothersideofgod
and
claude
committed

Commits on May 11, 2026