web-client

Author	SHA1	Message	Date
Markov	5ce87e088b	refactor: pure JWT auth, no cookies All checks were successful Deploy Web Client / deploy (push) Successful in 12s Details - Remove middleware (no SSR auth check) - AuthGuard component checks localStorage token - Protected route group (protected) wraps all pages - Login page is public - All API calls use Authorization: Bearer header	2026-02-15 19:26:25 +01:00
Markov	747ad8d7a8	fix: set auth cookie server-side for reliable SSR auth All checks were successful Deploy Web Client / deploy (push) Successful in 12s Details	2026-02-15 19:23:40 +01:00
Markov	e655bba89b	feat: JWT token auth (local + future Authentik) - JWT via jose (HS256, 7d expiry) - Login API: POST /api/auth/login → returns token - Verify API: GET /api/auth/me - Middleware checks Bearer header or cookie - Token stored in localStorage + cookie (for SSR) - Authentik button (disabled, placeholder) - Auth headers auto-added to API requests	2026-02-15 19:05:37 +01:00
Markov	7187cbcf61	feat: simple login/password auth (cookie-based) - Login page with form - Middleware redirects unauthenticated to /login - Cookie session (7 days) - Credentials via AUTH_USER/AUTH_PASS env vars - Default: admin/teamboard	2026-02-15 19:03:28 +01:00