aboutsummaryrefslogtreecommitdiff
path: root/src/lib/Utility/oauth.ts
Commit message (Collapse)AuthorAgeFilesLines
* fix(security): mark auth cookies Secure outside localhostFuwn31 hours1-1/+0
| | | | | | | | | | The user and logout cookies were set with secure:false, so the AniList tokens the user cookie carries could traverse plaintext HTTP. Drop the override and let SvelteKit's default apply (Secure everywhere except http://localhost), giving Secure in production and on https://due.localhost while keeping plain-http local dev working. httpOnly is unchanged (the client reads the token from layout data; tightening that is tracked separately as the architectural part of C2).
* style: apply biome autofixes and resolve remaining lint findingsFuwn4 days1-1/+1
| | | | | | | | | | | | | | Auto-fixed cosmetic findings (import ordering, obj["k"]->obj.k, optional chaining, template literals, Date.now, parseInt radix, useless ternaries/ switch cases). Resolved the non-autofixable rest by hand: - Senpy: static-only class -> object literal (no this/static reliance). - app.html: var global shim -> window.global = window (keeps the shim, drops the unused-var flag). - biome-ignore with rationale for the logout document.cookie clear and the holodule scrape non-null assertion. Verified: biome check 0 diagnostics, svelte-check 0/0, 24/24 unit tests.
* chore(biome): drop formatter style overridesFuwn2026-03-011-38/+38
|
* deps(sveltekit): Migrate to SvelteKit 2Fuwn2026-01-221-1/+1
|
* fix: Throw redirectsFuwn2025-12-011-1/+1
|
* deps(SvelteKit): Migrate to SvelteKit 2Fuwn2025-06-091-1/+1
|
* feat(oauth): Expire session after 180 daysFuwn2025-05-271-1/+1
|
* chore(prettier): use spaces instead of tabsFuwn2024-10-091-37/+37
|
* feat: stronger logoutFuwn2024-02-061-3/+2
|
* refactor(utility): move helpers to utilityFuwn2024-01-131-0/+52