fix(auth): require an MP security role for contact reads and writes (F1, F3, F10) - #83

Merged

chriskehayias merged 4 commits into

mainfrom

fix/auth-role-gate-contact-features

Sep 12, 2026

Commits on Sep 12, 2026

feat(auth): extend the MP security-role gate to reads, memoized per request

chriskehayias
and
claude
committed
afef3a9
fix(auth): require an MP security role for contact reads and writes (F1, F10)

chriskehayias
and
claude
committed
16c3415
fix(signin): only honor a same-origin relative callbackUrl (F3)

chriskehayias
and
claude
committed
ee46343
docs(auth): document the read gate, MP_SECURITY_ROLES and /no-access

chriskehayias
and
claude
committed
36227eb