hobokenchicken a8cb5c5933 fix: use SameSite=Lax for session cookie ...

SameSite=None requires Secure=true or modern browsers silently reject
the Set-Cookie header. Since the site is served over HTTPS via Caddy,
this was causing login to succeed (200) but the session cookie to be
dropped, making the subsequent /auth/me call fail with 401.

SameSite=Lax is the correct setting for same-origin session cookies.

2026-07-16 14:52:13 -04:00

..

audit

…

auth

fix: use SameSite=Lax for session cookie

2026-07-16 14:52:13 -04:00

bot

fix(bots): intercept /confess so original never hits chat

2026-07-15 20:28:47 -04:00

channel

fix: register forum/thread routes at top level + notification dots in ServerBar

2026-07-10 09:45:37 -04:00

config

fix: use APP_URL for email links instead of host:port

2026-06-30 15:59:55 -04:00

db

feat(bots): built-in bot runner + steamfree from UI

2026-07-15 14:14:02 -04:00

dm

fix: DM message ordering, consolidate input toolbar, add rich text/WYSIWYG, file upload with drag-drop

2026-07-06 17:33:20 +00:00

email

feat: add SMTP email support and fix profile/permissions bugs

2026-06-30 19:29:08 +00:00

embed

…

gateway

feat(bots): bot framework polish + store

2026-07-15 12:45:44 -04:00

giphy

…

invite

…

message

fix: client perms, @everyone/@channel, docs, unit tests

2026-07-15 20:56:53 -04:00

middleware

fix: handle 401 gracefully on web; add Bearer token auth for Tauri

2026-07-16 14:46:17 -04:00

moderation

…

notification

…

permissions

fix: client perms, @everyone/@channel, docs, unit tests

2026-07-15 20:56:53 -04:00

push

fix: remove Topic header, add push response logging

2026-07-02 15:16:33 -04:00

reaction

added features and fixes

2026-07-02 15:34:00 +00:00

readstate

…

server

feat(ui): BOTS section in member list

2026-07-15 20:37:05 -04:00

servergroup

added features and fixes

2026-07-02 15:34:00 +00:00

upload

change upload limit from 25MB to 1GB

2026-07-07 13:43:41 +00:00

voice

feat(webrtc): add admin option to mute other participants

2026-07-06 13:04:39 +00:00

webhook

fix: resolve 7 audit issues - webhook tokens, cookie security, avatar save, TUI fallback, dead code, valkey default

2026-06-30 13:29:34 -04:00