Commit Graph

3 Commits

Author SHA1 Message Date
5ce87e088b refactor: pure JWT auth, no cookies
All checks were successful
Deploy Web Client / deploy (push) Successful in 12s
- Remove middleware (no SSR auth check)
- AuthGuard component checks localStorage token
- Protected route group (protected) wraps all pages
- Login page is public
- All API calls use Authorization: Bearer header
2026-02-15 19:26:25 +01:00
747ad8d7a8 fix: set auth cookie server-side for reliable SSR auth
All checks were successful
Deploy Web Client / deploy (push) Successful in 12s
2026-02-15 19:23:40 +01:00
e655bba89b feat: JWT token auth (local + future Authentik)
- JWT via jose (HS256, 7d expiry)
- Login API: POST /api/auth/login → returns token
- Verify API: GET /api/auth/me
- Middleware checks Bearer header or cookie
- Token stored in localStorage + cookie (for SSR)
- Authentik button (disabled, placeholder)
- Auth headers auto-added to API requests
2026-02-15 19:05:37 +01:00