session-security

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.gg/9QX9jTwBq

Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.

Full Stack Restaurant Website developed with HTML , CSS , JavaScript , PHP and Composer.

Authentication cookie security for Browser Use agents, Chrome, and CI pipelines. Local checks, clear findings, and actionable fixes.

SecurePHP est une bibliothèque PHP légère qui sécurise vos applications web contre XSS, CSRF et attaques de session, avec des helpers pour sécuriser les fichiers et les requêtes. Simple à intégrer et à tester, elle renforce la sécurité de vos formulaires et sessions.

Device Bound Session Credentials (W3C DBSC) for Django: stolen session cookies stop working.

AI-powered continuous authentication that prevents session hijacking using behavioral biometrics with zero user friction.

Async trusted-device management and session security for FastAPI.

ChatGPT subscriptions in China with CNY pricing, Alipay & WeChat payments, personal-account upgrades, coupon draws, referral rewards, and secure order tracking. 国内 ChatGPT 订阅服务：人民币明码标价、支付宝与微信付款、本人账号升级、优惠券抽卡、邀请有礼、邮箱查单与会话安全保护。

Sign and verify URLs and cookies to add a layer of protection to publicly accessible routes

A security-focused PHP 8 and MySQL authentication starter with CSRF protection, session hardening and role-based access control.

Parse Set-Cookie flags — detect missing Secure, HttpOnly, SameSite and cookie security misconfigurations for AppSec reviews.

离线的第三方服务凭证与交付风险核验清单，含结构化规则、CLI 和自动测试

✦ Preact session security manager with device trust, risk review, activity history, evidence export, and remote sign-out controls.

Security engineering laboratory for authentication, session protection, CSRF defense, token security, and automated security testing.

Login anomaly detection: impossible travel, fail bursts, and device churn (Python + TypeScript)

Web application security assessment focused on Session ID and Cookie vulnerabilities, session management risks, and mitigation strategies using DVWA.is, risk assessment, and mitigation strategies.

ChatGPT / GPT 代充安全指南：密码、验证码、Cookie、Session 哪些不能给，以及怎么判断第三方服务是否靠谱。

Zero Trust session monitor that scores live sessions against a behavioural baseline, binds requests to the browser with ECDSA signatures, and allows, step-ups or terminates sessions

Device Bound Session Credentials (DBSC) plugin for Better Auth: bind sessions to a device key so stolen cookies stop working.