Usman Baig
c0ad0cfb7a
fix: pass CSRF token to switch-context call in refresh route
...
The auth API requires CSRF tokens on POST requests. The switch-context
call was failing silently with 403, causing refreshed tokens to lack
org_id.
2026-03-13 11:30:00 +01:00
Usman Baig
34c80d0857
fix: restore org context during token refresh
...
After refreshing the base token, call switch-context to get an
org-scoped token. This prevents 403 errors on Pulse API requests
when the access token is refreshed mid-session.
2026-03-13 11:18:26 +01:00
Usman Baig
b7426d6128
fix: login loading overlay, deduplicate getCookieDomain (F-18, F-11)
...
- Login page shows LoadingOverlay during redirect instead of blank screen
- Extract getCookieDomain() to shared lib/utils/cookies.ts
2026-03-01 21:02:28 +01:00
Usman Baig
b4b1348a94
chore: update CHANGELOG.md to include improvements in authentication flow, addressing CSRF handling and cookie management for seamless sign-in and enhanced security
2026-02-27 11:52:20 +01:00
Usman Baig
edcf8a0c27
fix: set cookie domain to .ciphera.net for cross-subdomain auth
2026-01-18 21:39:57 +01:00
Usman Baig
d4486f952f
feat(security): switch auth to HttpOnly cookies and add server actions
2026-01-18 21:19:44 +01:00
