feat(auth): hardening unit 2 — fail closed in production

4 months ago

591af44

Authored

grim7/11/2026, 6:23:12 PM

- resolveAuthPosture guard: missing BETTER_AUTH_SECRET refuses to serve when
  NODE_ENV=production; dev open-gate fallback unchanged
- api exits at boot on posture failure; web getAuth enforces per request
- posture guard unit tests

Parent6428ecd

6 files changed

DECISIONS.md+8−0
apps/api/src/index.ts+16−1
apps/web/src/lib/server/auth.ts+6−2
packages/db/src/auth.posture.test.ts+28−0
packages/db/src/auth.ts+23−0
packages/db/src/index.ts+6−1

boring / v2

feat(auth): hardening unit 2 — fail closed in production