Danijel Martinek 7b0c2ea590 fix(auth): declare users email/username/displayName in DSR pii map ...

The DSR walkers read the COLLECTION-level custom.pii map, which the
users collection never declared — Art. 15 export returned bare ids and
Art. 17 soft delete redacted nothing; the auth-injected email field in
particular was invisible (audit finding A5). Declares email (auto-added
by Payload auth: true), username and displayName as exportable +
restrictable; walker tests pin a users-shaped collection end to end.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 18:25:46 +02:00

..

src

fix(auth): declare users email/username/displayName in DSR pii map

2026-07-10 18:25:46 +02:00

tests

feat(auth): add signIn rate-limit backfill with dual ip/account budgets

2026-05-20 09:22:41 +00:00

AGENTS.md

docs(adr): rename ADR-012 — drop Lazar; update title + content + cross-refs

2026-05-13 10:07:37 +02:00

CHANGELOG.md

feat: hybrid versioning + automated CHANGELOG via release-please

2026-05-13 17:17:16 +02:00

eslint.config.js

refactor: rename eslint-config + typescript-config to core-eslint + core-typescript

2026-05-05 10:37:07 +02:00

package.json

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

stryker.config.json

feat(coverage): pnpm mutate (Stryker) + L3 implementation

2026-05-13 16:31:30 +02:00

tsconfig.json

refactor: rename eslint-config + typescript-config to core-eslint + core-typescript

2026-05-05 10:37:07 +02:00

turbo.json

feat(auth): scaffold empty package with feature tag + path aliases

2026-05-05 00:37:13 +02:00

vitest.config.ts

feat(core-shared/conformance): manifest coverage schema + vitest helper

2026-05-13 13:51:13 +02:00