aboutsummaryrefslogtreecommitdiff
path: root/src/routes/api/oauth/refresh/+server.ts
Commit message (Collapse)AuthorAgeFilesLines
* fix(api): drop unused redirect query param from oauth refreshFuwn2026-04-181-3/+1
| | | | | | | | | | | | The refresh endpoint accepted a ?redirect query param and, when present, called redirect(303, "/") instead of returning the refreshed token as JSON. The target was hardcoded to "/" regardless of the param's value, so the feature was dead — and the pattern of reading a "redirect" param invited future open-redirect bugs if someone wired the value through to redirect() directly. The sole in-tree caller (feeds/activity-notifications) reads the JSON response, so always return JSON and drop the redirect import.
* chore(biome): drop formatter style overridesFuwn2026-03-011-23/+23
|
* deps(sveltekit): Migrate to SvelteKit 2Fuwn2026-01-221-1/+1
|
* fix: Throw redirectsFuwn2025-12-011-1/+1
|
* deps(SvelteKit): Migrate to SvelteKit 2Fuwn2025-06-091-1/+1
|
* chore(prettier): use spaces instead of tabsFuwn2024-10-091-20/+20
|
* feat: stronger logoutFuwn2024-02-061-3/+2
|
* feat(error): more error debuggingFuwn2023-12-151-1/+3
|
* feat(notifications): refresh tokenFuwn2023-12-151-25/+18
|
* fix(earthly): environment variable typesFuwn2023-12-071-2/+2
|
* feat(oauth): refresh token routeFuwn2023-09-171-0/+36