If you discover a security vulnerability in auth-ui, please report it responsibly by emailing the Datum Cloud security team rather than opening a public issue. This allows us to address the vulnerability before it is disclosed publicly.

For details on Datum Cloud's security policy and how to report vulnerabilities, please see the Datum Cloud Security Policy.

This project handles authentication and authorization. Security is a critical concern. When contributing, please:

• Review the Architecture Security Documentation for security design principles
• Run the full test suite before submitting changes
• Be mindful of authentication and authorization boundaries
• Report suspected security issues privately, not in issues or pull requests

Security updates are provided for the current major version only. Users are encouraged to keep their deployment up to date with the latest releases.