mirror of
https://github.com/baptisteArno/typebot.io.git
synced 2026-06-13 21:02:56 +08:00
c0ffd825e2
- Secure Google Sheets OAuth state with a signed payload, expiry, user binding, and HttpOnly nonce cookie. - Enforce workspace and typebot write authorization before generating consent URLs and before callback side effects. - Scope Google Sheets credential creation and typebot updates in a transaction, and clear the OAuth state cookie after callback. - Add OAuth state verification to the Forge popup flow and centralize OAuth block definition lookup. - Add tests for signed Google Sheets OAuth state parsing and redirect sanitization. |
||
|---|---|---|
| .. | ||
| .cursor | ||
| public | ||
| src | ||
| next.config.mjs | ||
| package.json | ||
| postcss.config.mjs | ||
| tolgee.d.ts | ||
| tsconfig.json | ||