9 Commits

Author	SHA1	Message	Date
Kenneth	294fadfe4c	fix(backend): optional auth ret 401 if token invalid	2025-12-29 01:01:28 +00:00
Kenneth	f4620dff3a	fix(backend): optional auth for share routes ... Add auth.NewOptionalAuthMiddleware to run auth only when credentials are present (Authorization header or auth cookies). Use it on share consumption routes so public shares remain accessible unauthenticated, while authenticated callers can resolve account-scoped shares. This prevents a panic in share middleware when accountId was provided but the request wasn’t authenticated (nil reqctx.AuthenticatedUser type assertion).	2025-12-29 00:07:44 +00:00
Kenneth	3686f87377	feat: suppor tokenDelivery field for account reg	2025-12-16 00:41:30 +00:00
Kenneth	3b37a8d189	fix: auto refresh if access token not in cookies	2025-12-15 00:38:23 +00:00
Kenneth	539b15dcb7	refactor: introduce reqctx pkg for request context	2025-12-04 00:48:43 +00:00
Kenneth	57167d5715	feat: impl cookie-based auth tokens exchange ... implement access/refresh token exchange via cookies as well as automatic access token refresh	2025-12-04 00:26:20 +00:00
Kenneth	033ad65d5f	feat: improve err logging	2025-11-30 19:19:33 +00:00
Kenneth	629d56b5ab	fix: registration endpoint and db auto close issue	2025-11-29 20:51:56 +00:00
Kenneth	389fe35a0a	feat: impl bearer auth middleware	2025-11-26 01:09:42 +00:00