session-security

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.gg/9QX9jTwBq

Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.

Full Stack Restaurant Website developed with HTML , CSS , JavaScript , PHP and Composer.

Authentication cookie security for Browser Use agents, Chrome, and CI pipelines. Local checks, clear findings, and actionable fixes.

SecurePHP est une bibliothèque PHP légère qui sécurise vos applications web contre XSS, CSRF et attaques de session, avec des helpers pour sécuriser les fichiers et les requêtes. Simple à intégrer et à tester, elle renforce la sécurité de vos formulaires et sessions.

Async trusted-device management and session security for FastAPI.

AI-powered continuous authentication that prevents session hijacking using behavioral biometrics with zero user friction.

Device Bound Session Credentials (W3C DBSC) for Django: stolen session cookies stop working.

ChatGPT subscriptions in China with CNY pricing, Alipay & WeChat payments, personal-account upgrades, coupon draws, referral rewards, and secure order tracking. 国内 ChatGPT 订阅服务：人民币明码标价、支付宝与微信付款、本人账号升级、优惠券抽卡、邀请有礼、邮箱查单与会话安全保护。

Web application security assessment focused on Session ID and Cookie vulnerabilities, session management risks, and mitigation strategies using DVWA.is, risk assessment, and mitigation strategies.

✦ Preact session security manager with device trust, risk review, activity history, evidence export, and remote sign-out controls.

离线的第三方服务凭证与交付风险核验清单，含结构化规则、CLI 和自动测试

Login anomaly detection: impossible travel, fail bursts, and device churn (Python + TypeScript)

Sign and verify URLs and cookies to add a layer of protection to publicly accessible routes

Parse Set-Cookie flags — detect missing Secure, HttpOnly, SameSite and cookie security misconfigurations for AppSec reviews.

Security engineering laboratory for authentication, session protection, CSRF defense, token security, and automated security testing.

A security-focused PHP 8 and MySQL authentication starter with CSRF protection, session hardening and role-based access control.

Zero Trust session monitor that scores live sessions against a behavioural baseline, binds requests to the browser with ECDSA signatures, and allows, step-ups or terminates sessions

Device Bound Session Credentials (DBSC) plugin for Better Auth: bind sessions to a device key so stolen cookies stop working.

ChatGPT subscriptions in China with CNY pricing, Alipay & WeChat payments, personal-account upgrades, coupon draws, referral rewards, and secure order tracking. 国内 ChatGPT 订阅服务：人民币明码标价、支付宝与微信付款、本人账号升级、优惠券抽卡、邀请有礼、邮箱查单与会话安全保护。