Make auth JWT-only for Capacitor WebView origins (#22)
Unit Tests / test (pull_request) Successful in 11s

Drop CSRF cookie dependency (js-cookie), store tokens via localStorage with
optional Capacitor Preferences mirror, and attach Authorization on every
request so Android/iOS shells work without third-party cookies.
This commit is contained in:
2026-07-26 16:06:28 -05:00
parent 0fc8739d26
commit 8ac0b2a4ff
16 changed files with 503 additions and 111 deletions
-1
View File
@@ -18,7 +18,6 @@
"bootstrap": "^5.3.3",
"chroma-js": "^3.1.2",
"formik": "^2.4.6",
"js-cookie": "^3.0.5",
"jwt-decode": "^4.0.0",
"lodash": "^4.17.21",
"markdown-to-jsx": "^7.7.2",