5 Commits

Author	SHA1	Message	Date
Tyler Gillispie	3e253f928d	backup: jules session 5556705001895338576 phase 3 wip	2026-08-27 20:24:45 -07:00
Tyler Gillispie	0a3c147880	fix(events): patch db backfill for legacy users and sync frontend domain drift on rotation	2026-08-27 00:21:34 -07:00
Tyler Gillispie	6a5a769203	sec(auth-api): implement zero-trust scope guards and permission middleware	2026-08-25 15:39:54 -07:00
Tyler Gillispie	b9f4ccd71d	feat(auth): resolve mobile cookie shadowing and synchronize tasks/path.md ... - Implement iterative session cookie candidate resolution in getAuthenticatedUser - Eliminate Hono first-match limitation causing mobile login redirect loops - Use absolute UTC ISO strings for PostgreSQL session expiry queries - Opportunistically clear host-level cookies upon shadow detection - Ensure exhaustive server-side session revocation across all cookie candidates on logout - Add automated regression test for cookie shadowing in server/main.test.ts - Rename and standardize tasks/path.md with 5-template orchestrator standard	2026-08-24 21:48:33 -07:00
google-labs-jules[bot]	947b38d81a	Investigate mobile login cookie persistence bug ... - Investigated Chromium Android wildcard domain cookie behavior. - Researched Hono's `getCookie` first-match parsing behavior. - Added experimental Deno test scripts in `scratch/` for Hono cookie header parsing and pg timezone concepts. - Wrote full root-cause analysis and ranked architectural solutions in `scratch/INVESTIGATIVE_REPORT.md`. Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>	2026-08-25 00:31:19 +00:00