feat: PKCE auth + CI/CD deploy
Some checks failed
CI/CD — Build & Deploy / Build & Deploy (push) Failing after 25s

- Frontend: PKCE flow (oauth.js, api.js centralized, cookie-based AuthContext)
- Backend: token introspection, cookies httpOnly, refresh endpoint
- Replaced localStorage JWT with httpOnly session cookies
- useSaveSync migrated to cookie auth
- cookie-parser added
- Gitea CI workflow (vps-runner pattern)
This commit is contained in:
2026-03-24 13:01:15 +01:00
parent 39f683a31e
commit 91d1616dd7
15 changed files with 548 additions and 393 deletions

View File

@@ -1,7 +1,8 @@
# .env.sample - Sample Environment Variables for Frontend (Vite)
# Backend API URL (call it in React with import.meta.env.VITE_BACKEND_URL)
# Backend API URL
VITE_BACKEND_URL=http://localhost:3310
# SuperOAuth URL (OAuth login provider)
VITE_SUPEROAUTH_URL=https://superoauth.tetardtek.com
# SuperOAuth PKCE — OAuth provider
VITE_OAUTH_URL=https://superoauth.tetardtek.com
VITE_OAUTH_CLIENT_ID=clickerz