timonrieger fa6ce8cc00 fix(server): collapse OAuth callback messages to prevent email-existence oracle ...

Two distinct error messages in the OAuth callback endpoint revealed
whether an email address was already registered in the database.
An attacker controlling the OAuth provider's email claim could probe
the user table without authentication. Both cases now return the same
generic message.

2026-04-30 11:54:00 +02:00

..

bin

…

src

fix(server): collapse OAuth callback messages to prevent email-existence oracle

2026-04-30 11:54:00 +02:00

test

…

.gitignore

…

.npmignore

…

.nvmrc

…

.prettierignore

…

.prettierrc

…

Dockerfile

…

Dockerfile.dev

…

eslint.config.mjs

…

helmet.json

…

mise.toml

…

nest-cli.json

…

package.json

…

tsconfig.build.json

…

tsconfig.json

…