vikingowl c6cdc11693 feat(auth): D5 cleanup + W3 web refresh UX ...

D5 — backend cleanup:
- Migration 000029 drops legacy token_hash column from sessions
- JWT_SECRET renamed to APP_SECRET (fallback + deprecation warning)

W3 — web session UX:
- AuthData type: session_token→refresh_token, remove expires_in
- cookies.ts: refresh_token cookie, non-HttpOnly access_expires_at
- client.server.ts: sends X-Refresh-Token header (not JSON body)
- hooks.server.ts: simplified two-path SSR refresh logic
- refresh.ts: single-flight client-side refresh
- client.ts: proactive refresh + 401 retry on non-auth paths
- /api/auth/refresh: SvelteKit proxy for HttpOnly cookie refresh
- OAuth callback, Datenschutz page updated to new cookie names

2026-04-26 13:25:48 +02:00

app

feat: implement full Flutter MVP app

2026-02-21 07:10:30 +01:00

backend

feat(auth): D5 cleanup + W3 web refresh UX

2026-04-26 13:25:48 +02:00

planning

chore: remove Mistral/Ollama legacy references after Gemini migration

2026-04-25 17:31:58 +02:00

web

feat(auth): D5 cleanup + W3 web refresh UX

2026-04-26 13:25:48 +02:00

.gitignore

chore: add .worktrees/ to .gitignore

2026-04-26 11:36:27 +02:00

.gitlab-ci.yml

ci(deploy): wire AI_AGENT_DISCOVERY and DISCOVERY_TOKEN into helm upgrade

2026-04-18 08:17:06 +02:00

.pre-commit-config.yaml

test(discovery/crawler): capture golden fixtures from five sources

2026-04-18 11:45:53 +02:00

CLAUDE.md

chore: remove Mistral/Ollama legacy references after Gemini migration

2026-04-25 17:31:58 +02:00

Justfile

fix: svelte-check needs web/.env; only fail on errors not warnings

2026-04-07 03:09:01 +02:00

Description

No description provided

1.7 MiB

Languages

Go 60.3%

Svelte 20.3%

Dart 11.1%

TypeScript 5%

PLpgSQL 1.1%

Other 2.1%