feat: harden SaaS authentication and authorization

2026-07-28 12:15:51 +08:00
parent f22f329d33
commit 5d2248efee
123 changed files with 9090 additions and 2822 deletions
--- a/Tiku.Application/Auth/AuthExceptions.cs
+++ b/Tiku.Application/Auth/AuthExceptions.cs
@@ -19,3 +19,6 @@ public sealed class SmsRateLimitedException()

 public sealed class AuthProviderNotConfiguredException(string provider)
    : AuthException("auth_provider_not_configured", $"The {provider} auth provider is not configured.");
+
+public sealed class InvalidAuthChallengeException(string code = "invalid_auth_challenge")
+    : AuthException(code, "The authentication challenge is invalid, consumed, or expired.");