saopig1andClaude Opus 4.8 c9a0719128 feat(auth): guest-aware requireAuth + disable invalidates guest sessions ...

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 11:25:26 +08:00

..

api

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

auth

fix(auth): race-safe first-run setup + rolling cookie max-age refresh

2026-05-27 14:54:19 +08:00

middleware

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

referrer-policy.test.ts

fix(web): referrer-policy same-origin so same-origin POSTs keep a real Origin

2026-05-29 21:25:20 +08:00

security-headers.test.ts

feat(auth): X-Frame-Options + CSP frame-ancestors clickjacking defence

2026-05-27 16:34:52 +08:00

server.ts

feat(auth): guest-aware requireAuth + disable invalidates guest sessions

2026-06-25 11:25:26 +08:00

websocket-auth.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

websocket.ts

fix: harden bot lifecycle, validate HTTP inputs, make YouTube truly optional

2026-04-11 01:35:14 +08:00