feat(csrf): declarative CSRF protection for cookie-authenticated routes - #118

Draft

joewiz wants to merge 2 commits into

eeditiones:mainfrom

joewiz:feature/csrf-protection

Commits on May 18, 2026

feat(csrf): declarative CSRF protection for cookie-authenticated routes

joewiz
and
claude
committed
373db4f
test(csrf): fix route path in no-config bypass test

joewiz
and
claude
committed
eb1d6d1