security: scope tokens to hosts to prevent credential exfiltration#844

Open

BYK wants to merge 23 commits intomainfrom

byk/security/host-scoped-tokens

Commits on Apr 24, 2026

security: scope tokens to hosts to prevent credential exfiltration
Burak Yigit Kaya
committed
fix: surface CliError from .sentryclirc shim; clarify SaaS port test
Burak Yigit Kaya
committed
fix: extend host-scoping trust class to include discovered regional silos
Burak Yigit Kaya
committed
fix: bypass rc URL guard for auth login/logout; fix bare-hostname scoping
Burak Yigit Kaya
committed
fix: robust argv parsing for auth login/logout detection
Burak Yigit Kaya
committed
security: address subagent review findings (fail-closed, HostScopeError, SaaS hardening)
Burak Yigit Kaya
committed
fix: persist login URL only after login succeeds (not before re-auth prompt)
Burak Yigit Kaya
committed
fix: allow IAP custom headers during 'auth login --url' onboarding
Burak Yigit Kaya
committed
security: tighten SaaS bypass + trust anchor registration (bot review)
Burak Yigit Kaya
committed
security: refuse auth login when effective host is rc-sourced (CVE #4)
Burak Yigit Kaya
committed
security: migrate NULL host from boot snapshot + tighten SaaS checks
Burak Yigit Kaya
committed
fix: atomic stored-token-host lookup (no TOCTOU fallback)
Burak Yigit Kaya
committed

Commits on Apr 25, 2026

security: parse sntrys_ token claim for fetch-layer DiD + env-token UX
Burak Yigit Kaya
committed
fix: normalize bare-hostname rc URL + evict trust state on clearAuth
Burak Yigit Kaya
committed
fix: claim check honors region URL extension (self-hosted multi-region)
Burak Yigit Kaya
committed
fix(test): format compaction (CI biome stricter than local)
Burak Yigit Kaya
committed
fix: clearAuth preserves login trust anchor (re-auth + IAP)
Burak Yigit Kaya
committed
refactor: consolidate trust-extension state + remove AI slop
Burak Yigit Kaya
committed
fix: refuseLoginToUntrustedHost checks anchor matches host (not just exists)
Burak Yigit Kaya
committed

Commits on Apr 26, 2026

refactor: extract shared host-scoping test helpers + normalizeUserInputToOrigin
Burak Yigit Kaya
committed
fix: only refuse --token login to untrusted host (drop OAuth-path friction)
Burak Yigit Kaya
committed
remove: drop hasLoginTrustAnchor (footgun, no production callers)
Burak Yigit Kaya
committed
revert: re-enable refusal for OAuth login path (phishing defense)
Burak Yigit Kaya
committed