Issues

• Perf: Address N+1 gRPC calls in MessageService list operations

  simonforsberg/relay#19 · Filter by author coderabbitai opened on Jun 4, 2026
  

• IDOR vulnerability on mutation endpoints

  simonforsberg/relay#13 · Filter by author simonforsberg opened on May 26, 2026

• protect /api/users/by-username with service-to-service authentication

  simonforsberg/relay#11 · Filter by author simonforsberg opened on May 26, 2026

• Add explicit HTTP timeouts and map downstream failures in UserServiceClient (auth-path call)

  simonforsberg/relay#10 · Filter by author simonforsberg opened on May 26, 2026

• Re-enable CSRF protection for the session-backed BFF

  simonforsberg/relay#7 · Filter by author simonforsberg opened on May 22, 2026
  2

• Replace ddl-auto=update with Flyway migrations

  simonforsberg/relay#4 · Filter by author simonforsberg opened on May 21, 2026

• Implement outbox pattern

  simonforsberg/relay#3 · Filter by author simonforsberg opened on May 21, 2026