01JWT audience (aud) claim validation and binding
02Local service hardening with Unix sockets and OS-specific sandboxing
030 GitHub stars
04Strict cookie configuration (HttpOnly, Secure, SameSite=Strict)
05Subdomain-level security isolation using Same-Origin Policy
06Secure local service tunneling via WebSocket bridges