Public Webforms: Deep-link handling and security - #1792

Open

nospame wants to merge 12 commits into

ejp/public-webforms-authfrom

ejp/public-webforms-confinement

Commits on Aug 11, 2026

Allow public web apps sessions to reach get_endpoint

nospame
and
claude
committed
3082d29
Restrict public web apps sessions to an allowlist of routes

nospame
and
claude
committed
c06e90f
Accept HQ authoritative app/endpoint on HqUserDetailsBean

nospame
and
claude
committed
5d950a5
Lock public web apps sessions to their HQ-assigned app/endpoint

nospame
and
claude
committed
00767bf
Fail closed when a public session's @AppInstall request cannot be locked

nospame
and
claude
committed
c3c28b2
Allow endpoint navigation for public web apps sessions

nospame
and
claude
committed
6df8cbd
Pin public web apps session restore to its HQ-authenticated user

nospame
and
claude
committed
1e6163d
Restrict public web apps sessions to their own form session

nospame
and
claude
committed
ca819c9

Commits on Sep 9, 2026