4cf5c49274
- Update data model enums to match backend models - Update API reference auth requirements - Add dispute module references and warning blocks - Add 2026-05-24 audit remediation callout to Overview - Generate task breakdowns and audit artifacts - Add doc alignment report (.taskmaster/reports/)
1.1 KiB
1.1 KiB
taskmaster_id, status, priority, depends_on, parent_id, source, generated_at
| taskmaster_id | status | priority | depends_on | parent_id | source | generated_at | |
|---|---|---|---|---|---|---|---|
| 4.5 | pending | high |
|
4 | taskmaster | 2026-05-24T07:15:25.199Z |
4.5 - Decide session, passkey, and admin step-up architecture
- 4.5 - Decide session, passkey, and admin step-up architecture #taskmaster #priority/high #status/pending ⏫ 🆔 tm-4-5 ⛔ tm-2
Metadata
| Field | Value |
|---|---|
| Taskmaster ID | 4.5 |
| Status | pending |
| Priority | high |
| Dependencies | 2 |
| Parent | 4 - Define backend security and refactor strategy from latest audit |
Description
Choose browser session model and high-risk admin authentication requirements.
Details
Decide localStorage versus httpOnly cookies, access/refresh token lifetimes, CSRF strategy, refresh rotation, WebAuthn requirements, OAuth requirements, device/session revocation, and whether payouts/role changes require step-up authentication or two-person approval.
Verification
Decision record lists chosen model, rejected alternatives, migration cost, and required implementation tasks.