T

Admin 2ffdf77905 feat(auth): instance-owner gate — owner store, JWT sessions, setup/login UI (onboarding M1+M2)

lib/owner: argon2id credential store, HS256 access/refresh pair with kid,
hashed-jti session store, throttler (5 free failures then 4^n backoff).
handlers/auth: /api/auth/* + RequireSession/CSRF/GateWebSocket middleware;
every /api/* route is now gated (428 in setup mode). --reset-owner recovery.
Frontend: AuthScreen (setup/login), useAuth gate hook, gated data hooks +
single-flight silent refresh, Owner account section in settings.
spec.yaml documents the full surface.

2026-08-22 22:58:18 +01:00

.gitea/workflows

fix: Tighten license autocommit bot to PRs, implement .licenseignore for ignoring specific files or directories

2026-08-04 23:34:46 +01:00

.vscode

real init

2026-07-29 01:36:09 +01:00

src

feat(auth): instance-owner gate — owner store, JWT sessions, setup/login UI (onboarding M1+M2)

2026-08-22 22:58:18 +01:00

.dockerignore

real init