feat(club-005): club registered users: account linking and automatic recovery
This commit is contained in:
14
work/artifacts/CLUB-005/security.json
Normal file
14
work/artifacts/CLUB-005/security.json
Normal file
@@ -0,0 +1,14 @@
|
||||
{
|
||||
"feature_id": "CLUB-005",
|
||||
"agent": "security",
|
||||
"stage": "security_gate",
|
||||
"verdict": "APPROVED",
|
||||
"security_check": "security",
|
||||
"summary": "PATCH y POST requieren sesión autenticada. Merge usa transacciones con FOR UPDATE.",
|
||||
"checks": {
|
||||
"auth": "OK: PATCH /club/me y POST /club/merge requieren deps.authenticate (sesión)",
|
||||
"race_condition": "OK: merge usa FOR UPDATE + COMMIT",
|
||||
"no_overwrite": "OK: linkMemberToUser no sobreescribe userId existente"
|
||||
},
|
||||
"timestamp": "2026-08-26T20:49:35Z"
|
||||
}
|
||||
Reference in New Issue
Block a user