Lucas Berger aabcb5d043 feat(260610-k1z-01): add persistSessionCookie() middleware (AUTH-02) ...

- Re-issues oidc-auth cookie with maxAge so PWA sessions survive close/reopen
- Guards on c.get('oidcAuthJwt'): only runs when @hono/oidc-auth set a valid session
- Falsy oidcAuthJwt falls straight through — no resurrection of deleted/absent cookies
- Cookie attrs mirror the library: httpOnly, secure, sameSite=Lax, conditional domain
- maxAge reads OIDC_AUTH_EXPIRES (default 86400s)

2026-06-10 14:30:59 -04:00

..

devBypass.ts

fix(02): dev-auth bypass no longer blocked by oidcAuthMiddleware

2026-06-05 13:48:00 -04:00

middleware.ts

feat(01-02): wire OIDC middleware, /api/me route, and authenticated PWA shell

2026-06-04 10:22:46 -04:00

persistSessionCookie.ts

feat(260610-k1z-01): add persistSessionCookie() middleware (AUTH-02)

2026-06-10 14:30:59 -04:00

user.ts

fix(calendar): all-day off-by-one (exclusive DTEND) + member color too close to shared rose

2026-06-07 18:37:56 -04:00