Skip to content

fix(auth): fecha rotas de redefinição por OTP e endurece limite de códigos (auditoria COMP-013, 014, 009) - #64

Merged
vinicius3w merged 2 commits into
developfrom
fix/auth-otp-routes
Oct 9, 2026
Merged

vinicius3w merged 2 commits into
developfrom
fix/auth-otp-routes

Conversation

@vinicius3w

Copy link
Copy Markdown
Contributor

Segunda rodada da auditoria (ADR-036).

  • COMP-013: disabledPaths nas 5 rotas de OTP não usadas; sendVerificationOTP só envia type sign-in
  • COMP-014: log de cota estourada e comentário corrigido; anti-bot fica para antes do lançamento
  • COMP-009: lint também barra import relativo de db

Migração: nenhuma.

https://claude.ai/code/session_01VDxbrneS3TEAUmdgVmkKpQ

vinicius3w and others added 2 commits October 9, 2026 20:16
…codigos (auditoria COMP-013, 014, 009)

- disabledPaths para request-password-reset, forget-password, reset-password, request-email-change e change-email;
  sendVerificationOTP so envia type "sign-in" (COMP-013)
- log de cota de OTP estourada com hash do e-mail e IP; comentario corrigido (ate 24 h) (COMP-014)
- regra de lint contra @/db tambem para imports relativos, com teste via ESLint API (COMP-009)
- testes via auth.handler (HTTP) verificados por mutacao

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VDxbrneS3TEAUmdgVmkKpQ
… maiores sao planejados)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VDxbrneS3TEAUmdgVmkKpQ
@vercel

vercel Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
compasso Ready Ready Preview Oct 9, 2026 11:19pm UTC

@vinicius3w
vinicius3w force-pushed the fix/auth-otp-routes branch from 7f9b3a8 to ece3baa Compare October 9, 2026 23:19
@vinicius3w
vinicius3w merged commit 9f64104 into develop Oct 9, 2026
4 checks passed

This branch was successfully deployed

1 active deployment
Preview — ece3baa5 Deployed Oct 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant