moby/brewlog
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
50 commits 3 branches 0 tags 4.2 MiB
Commit graph

6 commits

Author SHA1 Message Date
Jon Seager
e79db7c1d3
chore: rename server crate to application 2025-11-25 21:40:39 +00:00
Jon Seager
7d4c7dda28
chore: remove unused code 2025-11-25 19:14:38 +00:00
Jon Seager
42d0f71eb1
feat!: use numeric, database-generated IDs throughout 2025-11-25 18:21:04 +00:00
copilot-swe-agent[bot]
b46295d0cf
fix(auth): support session cookie authentication in API endpoints 
- Update AuthenticatedUser extractor to check session cookies first
- Add authenticate_via_session() helper function
- Session cookies now work for all API write operations
- Change SameSite to Strict for better CSRF protection
- Add BREWLOG_SECURE_COOKIES env var to enable secure flag in production

This fixes the bug where authenticated frontend users got 401 errors
when submitting forms. API endpoints now accept both Bearer tokens
and session cookies for authentication.

All 65 tests pass (8 unit + 42 server + 15 CLI) ✅

Co-authored-by: jnsgruk <668505+jnsgruk@users.noreply.github.com>
 2025-11-25 16:28:49 +00:00
copilot-swe-agent[bot]
5c05f35a59
fix(auth): make AuthenticatedUser extractor perform authentication directly 
Co-authored-by: jnsgruk <668505+jnsgruk@users.noreply.github.com>
 2025-11-25 16:28:12 +00:00
copilot-swe-agent[bot]
6d0ee869f7
feat(api): add authentication middleware and token management routes 
Co-authored-by: jnsgruk <668505+jnsgruk@users.noreply.github.com>
 2025-11-25 16:28:10 +00:00