fix: switch auth tokens to httpOnly cookies#117

Merged

GitAddRemote merged 9 commits intomainfrom

fix/ISSUE-93-httponly-cookies

Apr 13, 2026

Commits on Apr 12, 2026

feat: switch auth tokens to httpOnly cookies
GitAddRemote
committed

Commits on Apr 13, 2026

fix: address PR review comments on httpOnly cookie implementation
GitAddRemote
committed
fix: cast set-cookie header through unknown to satisfy strict TS
GitAddRemote
committed
fix: address review comments on cookie auth controller and e2e test
GitAddRemote
committed
fix: address review comments on port type and e2e test assertions
GitAddRemote
committed
fix: address PR117 review comments
GitAddRemote
committed
fix: correct LocalStrategy return type and tighten e2e cookie assertions
GitAddRemote
committed
feat: add GET /auth/me endpoint for session state population
GitAddRemote
committed
fix: resolve merge conflicts with main
GitAddRemote
committed