Search results

Investigate reducing querystring metadata exposure of repo for query methods

Status: Open.

#39 In hypercerts-org/certified-group-service;

· aspiers opened on Jun 8, 2026

Let group.register choose the target PDS (per-PDS invite codes)

enhancementNew feature or requestNew feature or request

Product: CGS

Status: Open.

#38 In hypercerts-org/certified-group-service;

· aspiers opened on Jun 8, 2026

Group-repo putRecord: add swapRecord / optimistic-concurrency support (currently silent last-writer-wins)

enhancementNew feature or requestNew feature or request

Product: CGS

Status: Open.

#24 In hypercerts-org/certified-group-service;

· hb-agent opened on May 29, 2026

[low] jti column in group_audit_log is always null — audit log lacks per-request traceability

Product: CGS

Quality: security

Status: Open.

#8 In hypercerts-org/certified-group-service;

· aspiers opened on Mar 27, 2026

[medium] GROUP_PDS_INVITE_CODE stored and forwarded as plaintext — leaked if config is exposed

Product: CGS

Quality: security

Status: Open.

#7 In hypercerts-org/certified-group-service;

· aspiers opened on Mar 27, 2026

[medium] Demo OAuth sessions map is unbounded — memory leak and lost on restart

Product: CGS

Quality: security

Status: Open.

#6 In hypercerts-org/certified-group-service;

· aspiers opened on Mar 27, 2026

[low] accessJwt/refreshJwt visible in heap dumps via AtpAgent in-memory sessions

Product: CGS

Quality: security

Status: Open.

#5 In hypercerts-org/certified-group-service;

· aspiers opened on Mar 27, 2026

[high] ENCRYPTION_KEY reachable from all handlers via AppContext — no serialisation guard

Product: CGS

Quality: security

Tech debt

Status: Open.

#3 In hypercerts-org/certified-group-service;

· aspiers opened on Mar 27, 2026