Kenneth f4620dff3a fix(backend): optional auth for share routes ...

Add auth.NewOptionalAuthMiddleware to run auth only when credentials are
present (Authorization header or auth cookies). Use it on share
consumption routes so public shares remain accessible unauthenticated,
while authenticated callers can resolve account-scoped shares. This
prevents a panic in share middleware when accountId was provided but the
request wasn’t authenticated (nil reqctx.AuthenticatedUser type
assertion).

2025-12-29 00:07:44 +00:00

..

cookies.go

feat: suppor tokenDelivery field for account reg

2025-12-16 00:41:30 +00:00

err.go

refactor: introduce reqctx pkg for request context

2025-12-04 00:48:43 +00:00

grant.go

feat: impl refresh token rotation

2025-12-03 00:07:39 +00:00

http.go

feat: suppor tokenDelivery field for account reg

2025-12-16 00:41:30 +00:00

middleware.go

fix(backend): optional auth for share routes

2025-12-29 00:07:44 +00:00

service.go

feat: impl cookie-based auth tokens exchange

2025-12-04 00:26:20 +00:00

tokens.go

feat: use argon2id to hash refresh tokens in db

2025-12-03 23:05:00 +00:00