Security context

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

src/internal/auth/jwt.ts: most-fixed (5 issues). Treat as high-risk during review.

40 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Multiple fixes in this component address signature verification bypasses: missing length check before timingSafeEqual, canonical URI normalization, chunk signature algorithm/hex decoding, and host header validation. These indicate a high-risk surface where incomplete checks can allow unauthorized operations.

Auth Bypass: JWT verification has been hardened multiple times: switching to jose, enforcing JWK alg consistency, and validating expiration ranges. Algorithm confusion and signature verification bypass are critical risks.

Authorization Bypass: POST policy parsing had two distinct bypasses: parsing before signature verification and not enforcing that all submitted fields are covered by conditions. This allows attackers to attach arbitrary fields or exploit parsing errors.