TheGeneralist 151835258b docs: fix 8 reviewer findings in auth foundation spec ... - Role hierarchy: cumulative assignment + ROLE_GUEST floor; owner gets role_bits=15 - ALTER TABLE: move default_entry_visibility into CREATE TABLE DDL (idempotent) - Session cookie: add Secure flag conditionally on HTTPS (X-Forwarded-Proto) - API token role_bits: live query user_roles per request (vs snapshot) - POST /api/auth/setup after complete: returns 409 already_configured - users.role placeholder: use 'admin' in ensure_owner_exists INSERT - Disabled users: extractor JOINs users and checks status='active' - last_seen_at throttle: conditional update if >60s elapsed		2026-06-25 17:27:33 +02:00
..
2026-06-25-auth-foundation-design.md	docs: fix 8 reviewer findings in auth foundation spec	2026-06-25 17:27:33 +02:00