feat(graphql-server): Cookie Lifecycle & CSRF Enforcement#1041

Open

theothersideofgod wants to merge 9 commits intomainfrom

feat/server-auth-cookie-csrf

Commits on Apr 30, 2026

feat(graphql-server): add AuthSettings type and cookie helpers

theothersideofgod
and
claude
committed
feat(graphql-server): add auth-cookie middleware for session management

theothersideofgod
and
claude
committed
feat(graphql-server): load AuthSettings from tenant database

theothersideofgod
and
claude
committed
feat(graphql-server): wire CSRF and auth-cookie middleware

theothersideofgod
and
claude
committed
test(graphql-server): add cookie and auth-cookie unit tests

theothersideofgod
and
claude
committed
test(graphql-server): add CSRF middleware unit tests

theothersideofgod
and
claude
committed
fix(types): add enableCaptcha to AuthSettings interface

theothersideofgod
and
claude
committed
refactor(graphql-server): replace auth-cookie middleware with grafserv plugin

theothersideofgod
and
claude
committed
test(graphql-server): add AuthCookiePlugin unit tests

theothersideofgod
and
claude
committed