kolaente 530973c475 fix(auth): make SameSite=None conditional on HTTPS for refresh cookie ...

SameSite=None requires Secure=true per browser spec. When running over
plain HTTP (local dev, e2e tests), browsers reject or downgrade the
cookie, breaking session refresh. Fall back to SameSite=Lax for HTTP
while keeping SameSite=None for HTTPS (needed for the Electron desktop
app cross-origin scenario).

2026-03-03 10:41:19 +01:00

..

auth

fix(auth): make SameSite=None conditional on HTTPS for refresh cookie

2026-03-03 10:41:19 +01:00

avatar

fix: use session-aware file creation to avoid nested transactions

2026-02-25 11:03:02 +01:00

background

fix: use session-aware file creation to avoid nested transactions

2026-02-25 11:03:02 +01:00

dump

fix(restore): extract preValidateTableData to reduce cyclomatic complexity

2026-02-25 13:01:00 +01:00

keyvalue

feat: add keyvalue.Remember function

2025-07-17 16:19:13 +02:00

migration

fix(migration): support space-separated date format in TickTick importer

2026-03-02 08:35:35 +01:00