6 Commits

Author	SHA1	Message	Date
Markov	5ce87e088b	refactor: pure JWT auth, no cookies ... - Remove middleware (no SSR auth check) - AuthGuard component checks localStorage token - Protected route group (protected) wraps all pages - Login page is public - All API calls use Authorization: Bearer header	2026-02-15 19:26:25 +01:00
Markov	747ad8d7a8	fix: set auth cookie server-side for reliable SSR auth	2026-02-15 19:23:40 +01:00
Markov	e655bba89b	feat: JWT token auth (local + future Authentik) ... - JWT via jose (HS256, 7d expiry) - Login API: POST /api/auth/login → returns token - Verify API: GET /api/auth/me - Middleware checks Bearer header or cookie - Token stored in localStorage + cookie (for SSR) - Authentik button (disabled, placeholder) - Auth headers auto-added to API requests	2026-02-15 19:05:37 +01:00
Markov	7187cbcf61	feat: simple login/password auth (cookie-based) ... - Login page with form - Middleware redirects unauthenticated to /login - Cookie session (7 days) - Credentials via AUTH_USER/AUTH_PASS env vars - Default: admin/teamboard	2026-02-15 19:03:28 +01:00
Markov	a1b58ba916	fix: simplify API_BASE, remove Docker SSR workaround	2026-02-15 18:58:23 +01:00
Markov	1d998dca55	feat: Next.js frontend — kanban board, sidebar, dark theme ... - Kanban with drag-and-drop (5 columns) - Project sidebar navigation - API client (projects, tasks, agents, labels) - Tailwind CSS dark theme - Docker support, SSR with internal API URL - Port 3100 (3000 occupied by Gitea)	2026-02-15 18:52:49 +01:00