Luca adfa29e91e fix(auth): restore COOKIE_SECURE='auto' default for production ...

The customer-portal squash inadvertently reverted the upstream/beta
fix from PR #427: production NODE_ENV was flipping the cookie Secure
flag back to hard `true`, which broke admin login on
HTTPS-frontend → HTTP-backend reverse-proxy stacks (browser drops
the Secure cookie over HTTP, login loops indefinitely).

Restored upstream/beta's tokenUtils.js verbatim and re-layered only
the customer cookie helpers (CUSTOMER_COOKIE_NAME,
setCustomerAuthCookie, clearCustomerAuthCookie,
getCustomerTokenFromRequest) on top.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-05-11 00:29:04 +02:00

..

__tests__

fix(auth): /auth/session must enforce session timeout symmetrically (#350 recurrence)

2026-05-05 00:12:01 +02:00

assets/fonts

feat(branding): per-family generic fallback via meta.json

2026-05-04 22:27:52 +02:00

docs

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

migrations

feat(customers): customer portal (#354) on top of feature-flags reorg

2026-05-11 00:05:20 +02:00

scripts

feat: native S3 storage backend (#328) + presigned download follow-up

2026-04-28 10:06:36 +02:00

src

fix(auth): restore COOKIE_SECURE='auto' default for production

2026-05-11 00:29:04 +02:00

.dockerignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

.env.example

fix(auth): default COOKIE_SECURE to 'auto' in production + first-install UX (#427)

2026-05-09 15:55:09 +02:00

.eslintrc.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

audit-backend.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

dependencies-backend.json

Upgrade nodemailer to 7.0.7 (GHSA-mm7p-fcc7-pg87)

2025-10-13 21:11:38 +02:00

Dockerfile

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

Dockerfile.dev

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

ecosystem.config.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

init-production.sh

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

jest.config.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

jest.setup.js

feat: overhaul public landing page and backup tooling

2025-09-19 16:39:18 +02:00

knexfile.js

Fix PicPeak regressions and close #22 #24 #25 #26 #27 #28

2025-09-21 22:03:07 +02:00

package-lock.json

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

package.json

chore(beta): release 3.45.1-beta.0

2026-05-10 20:09:09 +00:00

server.js

feat(customers): customer portal (#354) on top of feature-flags reorg

2026-05-11 00:05:20 +02:00

test-filter.js

docs: fix deployment/admin routing and CORS guidance; add AGENTS.md; ignore AGENTS.md (refs #18)

2025-09-05 15:01:16 +02:00

wait-for-db.sh

fix(db): improve PostgreSQL connection check in wait-for-db.sh

2026-01-07 22:33:40 +01:00