hobokenchicken 9491f3a831 fix: use SameSite=Lax for session cookie ...

SameSite=None requires Secure=true or modern browsers silently reject
the Set-Cookie header. Since the site is served over HTTPS via Caddy,
this was causing login to succeed (200) but the session cookie to be
dropped, making the subsequent /auth/me call fail with 401.

SameSite=Lax is the correct setting for same-origin session cookies.

2026-07-16 14:52:13 -04:00

..

audit

feat(phase2): bulk delete + audit log; update roadmap/parity docs

2026-06-30 10:20:57 -04:00

auth

fix: use SameSite=Lax for session cookie

2026-07-16 14:52:13 -04:00

bot

fix(bots): intercept /confess so original never hits chat

2026-07-15 20:28:47 -04:00

channel

fix: register forum/thread routes at top level + notification dots in ServerBar

2026-07-10 09:45:37 -04:00

config

fix: use APP_URL for email links instead of host:port

2026-06-30 15:59:55 -04:00

db

feat(bots): built-in bot runner + steamfree from UI

2026-07-15 14:14:02 -04:00

dm

fix: DM message ordering, consolidate input toolbar, add rich text/WYSIWYG, file upload with drag-drop

2026-07-06 17:33:20 +00:00

email

feat: add SMTP email support and fix profile/permissions bugs

2026-06-30 19:29:08 +00:00

embed

sync: phase 1 backend + frontend from server

2026-06-30 09:26:03 -04:00

gateway

feat(bots): bot framework polish + store

2026-07-15 12:45:44 -04:00

giphy

Profiles, Giphy, uploads, settings UI

2026-06-28 16:06:08 -04:00

invite

fix: invite handler used creator_id but DB column is created_by

2026-06-29 15:32:24 -04:00

message

fix: client perms, @everyone/@channel, docs, unit tests

2026-07-15 20:56:53 -04:00

middleware

fix: handle 401 gracefully on web; add Bearer token auth for Tauri

2026-07-16 14:46:17 -04:00

moderation

sync: phase 1 backend + frontend from server

2026-06-30 09:26:03 -04:00

notification

feat(phase7): per-channel notification settings and read receipts

2026-06-30 12:39:14 -04:00

permissions

fix: client perms, @everyone/@channel, docs, unit tests

2026-07-15 20:56:53 -04:00

push

fix: remove Topic header, add push response logging

2026-07-02 15:16:33 -04:00

reaction

added features and fixes

2026-07-02 15:34:00 +00:00

readstate

feat(phase7): per-channel notification settings and read receipts

2026-06-30 12:39:14 -04:00

server

feat(ui): BOTS section in member list

2026-07-15 20:37:05 -04:00

servergroup

added features and fixes

2026-07-02 15:34:00 +00:00

upload

change upload limit from 25MB to 1GB

2026-07-07 13:43:41 +00:00

voice

feat(webrtc): add admin option to mute other participants

2026-07-06 13:04:39 +00:00

webhook

fix: resolve 7 audit issues - webhook tokens, cookie security, avatar save, TUI fallback, dead code, valkey default

2026-06-30 13:29:34 -04:00