GustavoandClaude Opus 5.5 161da90e02 feat: bind the GTI Fiscal SSO assertion to the browser (state/nonce) ...

/sso/fiscal now requires the state that GTI Fiscal creates when the flow
starts and signs it as the "nonce" claim; GTI Fiscal checks it against
its own one-time cookie. Without a valid state the panel sends the
browser to GTI Fiscal's /login, so the flow always starts there. This
prevents someone from pushing an assertion for their own account into
another person's browser (login CSRF).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-23 12:21:27 -03:00

..

__init__.py

feat: rotas e telas de CLIENTE (listar, criar, editar, detalhe, excluir)

2026-08-13 10:07:15 -03:00

auth.py

feat: logout apaga o cookie de preferencia de linhas por pagina

2026-08-20 08:55:56 -03:00

chave_manual.py

fix(seguranca): move algoritmo de geracao de chave do JS pro backend

2026-08-14 10:03:19 -03:00

clientes.py

feat: bolinha de status ativo/inativo clicavel na lista de clientes

2026-08-20 10:51:28 -03:00

contatos.py

fix: telefone de contato sem DDI e updates/excludes que fingiam sucesso

2026-08-15 11:50:37 -03:00

funcionarios.py

fix: telefone de contato sem DDI e updates/excludes que fingiam sucesso

2026-08-15 11:50:37 -03:00

log.py

feat: limite de 20 registros e botao de limpar log (admin)

2026-08-20 10:52:48 -03:00

minha_conta.py

feat: tela Minha conta para trocar a propria senha

2026-08-13 20:44:15 -03:00

sso.py

feat: bind the GTI Fiscal SSO assertion to the browser (state/nonce)

2026-09-23 12:21:27 -03:00