Security resilience helpers for environment checks, integrity signals, and timeout budgeting.
Deny-by-default authorization with RBAC, ABAC, tenant isolation, and web middleware.
Input validation, request limits, CORS, Fetch Metadata, and browser boundary protections.
Secret wrappers, envelope encryption, KMS providers, crypto agility, and password hashing.
Native-client device trust decisions, attestation metadata, and trust-tier session policy.
Secure error handling with public-safe responses, incident IDs, and panic boundaries.
Authentication helpers for JWT, OIDC, MFA, API keys, sessions, and step-up policy.
TLS policy validation, SPKI certificate pinning, and cleartext traffic detection.
Context-aware output encoding and URI sanitization for safer application responses.
Privacy controls for classification, consent, retention, pseudonymization, and redaction.
Shared security types, identity traits, correlation context, and data classification primitives.
Security telemetry, redaction, HMAC-sealed events, and audit-friendly event sinks.
No description provided.
No description provided.
No description provided.
No description provided.