Tetardtek 8c6777c980 feat: PKCE auth + CI/CD deploy ...

- Frontend: PKCE flow (oauth.ts, AuthCallback code exchange, 401 interceptor)
- Backend: token introspection via SuperOAuth (no more JWT secret)
- User model: superOauthId (unified) replaces oauthId+provider
- Cookies httpOnly session + refresh token
- POST /auth/refresh endpoint
- Gitea CI workflow (vps-runner pattern)
- DB_SYNC env var for initial schema creation

2026-03-24 13:01:14 +01:00

107 KiB

Raw Blame History

View Raw