Make auth JWT-only for Capacitor WebView origins (#22)
Unit Tests / test (pull_request) Successful in 10s

Drop CSRF cookie dependency (js-cookie), store tokens via localStorage with
optional Capacitor Preferences mirror, and attach Authorization on every
request so Android/iOS shells work without third-party cookies.
This commit is contained in:
2026-07-26 15:40:45 -05:00
parent 7f16a3dca8
commit a57173e25e
17 changed files with 659 additions and 104 deletions
-1
View File
@@ -18,7 +18,6 @@
"bootstrap": "^5.3.3",
"chroma-js": "^3.1.2",
"formik": "^2.4.6",
"js-cookie": "^3.0.5",
"jwt-decode": "^4.0.0",
"lodash": "^4.17.21",
"markdown-to-jsx": "^7.7.2",