Security context

Highlights

Auth Bypass: 28 prior fixes. Scrutinize any change in this area.

src/controllers/interaction.ts: most-fixed (5 issues). Treat as high-risk during review.

34 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Multiple fixes across different organization join paths (join, force-join, auto-join) had to add verification-type checks and domain restrictions, indicating a fragmented authorization model where each path implements its own incomplete validation.

Auth Bypass: Repeated fixes around ACR (Authentication Context Class Reference) handling show a fragile logic where authentication level could be downgraded or bypassed based on scope or explicit requests, requiring multiple patches to enforce IAL=2 and correct ACR assignment.

Auth Bypass: Email verification and session issuance were repeatedly patched to require email_verified and organization membership before creating a session, indicating a history of unverified users bypassing sign-in requirements.