aboutsummaryrefslogtreecommitdiff
path: root/src/routes/api/authentication/log-out/+server.ts
Commit message (Collapse)AuthorAgeFilesLines
* fix(security): mark auth cookies Secure outside localhostFuwn24 hours1-1/+0
| | | | | | | | | | The user and logout cookies were set with secure:false, so the AniList tokens the user cookie carries could traverse plaintext HTTP. Drop the override and let SvelteKit's default apply (Secure everywhere except http://localhost), giving Secure in production and on https://due.localhost while keeping plain-http local dev working. httpOnly is unchanged (the client reads the token from layout data; tightening that is tracked separately as the architectural part of C2).
* style: apply biome autofixes and resolve remaining lint findingsFuwn4 days1-1/+1
| | | | | | | | | | | | | | Auto-fixed cosmetic findings (import ordering, obj["k"]->obj.k, optional chaining, template literals, Date.now, parseInt radix, useless ternaries/ switch cases). Resolved the non-autofixable rest by hand: - Senpy: static-only class -> object literal (no this/static reliance). - app.html: var global shim -> window.global = window (keeps the shim, drops the unused-var flag). - biome-ignore with rationale for the logout document.cookie clear and the holodule scrape non-null assertion. Verified: biome check 0 diagnostics, svelte-check 0/0, 24/24 unit tests.
* chore(biome): drop formatter style overridesFuwn2026-03-011-11/+11
|
* deps(sveltekit): Migrate to SvelteKit 2Fuwn2026-01-221-1/+1
|
* fix: Throw redirectsFuwn2025-12-011-1/+1
|
* deps(SvelteKit): Migrate to SvelteKit 2Fuwn2025-06-091-1/+1
|
* chore(prettier): use spaces instead of tabsFuwn2024-10-091-9/+9
|
* feat: stronger logoutFuwn2024-02-061-1/+9
|
* feat(api): nest routesFuwn2023-12-141-0/+7
|
* refactor(auth): move to single pathFuwn2023-09-131-7/+0
|
* refactor(auth): move to apiFuwn2023-09-131-0/+7