Repository navigation

Verify session tokens before trusting server-side identity - #452

Merged

ericzakariasson merged 4 commits into

mainfrom

cursor/verify-server-sessions-f627

Oct 15, 2026

Merged

Verify session tokens before trusting server-side identity#452
ericzakariasson merged 4 commits into
mainfrom
cursor/verify-server-sessions-f627

Commits on Oct 14, 2026
- Verify session tokens before trusting server-side identity
  
  cursoragent
  and
  ericzakariasson
  committed
  ecbfa53
- Keep auth callback redirects on the same origin
  
  cursoragent
  and
  ericzakariasson
  committed
  645277a
Commits on Oct 15, 2026
- Merge remote-tracking branch 'origin/main' into cursor/verify-server-sessions-f627
  ericzakariasson
  committed
  604eb26
- Treat an expired access token as signed out
  
  ericzakariasson
  and
  cursoragent
  committed
  e437a94