Dorian 6487ae3673 fix: cookies Secure flag based on X-Forwarded-Proto, not dev_mode ...

Secure flag on session cookies broke HTTP LAN access — browsers refuse
to send Secure cookies over plain HTTP, causing 401 redirect loop.

Fix: check X-Forwarded-Proto header. Only set Secure when request came
over HTTPS. HTTP on LAN works, HTTPS still gets Secure cookies.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 11:34:29 +00:00

..

.cargo

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

archipelago

fix: cookies Secure flag based on X-Forwarded-Proto, not dev_mode

2026-03-28 11:34:29 +00:00

container

bug fixing and deploy and build diagnostics

2026-03-22 03:30:21 +00:00

container-init

mid coding commit

2026-01-24 22:59:20 +00:00

helpers

refactor: centralize constants, eliminate unwraps, remove dead code, resolve TODOs

2026-03-21 01:54:35 +00:00

js-engine

refactor: centralize constants, eliminate unwraps, remove dead code, resolve TODOs

2026-03-21 01:54:35 +00:00

models

mid coding commit

2026-01-24 22:59:20 +00:00

performance

Update archipelago: API, auth, container, parmanode, performance, security

2026-01-27 22:27:17 +00:00

security

feat: architecture review fixes, self-update system, CI pipeline, supply chain hardening

2026-03-25 15:52:26 +00:00

.env.example

Add comprehensive installation and setup documentation

2026-01-27 17:18:21 +00:00

.env.production

Update README and configuration for macOS support

2026-01-28 11:12:19 +00:00

Cargo.lock

bug fixing and deploy and build diagnostics

2026-03-22 03:30:21 +00:00

Cargo.toml

chore: remove dead core/parmanode crate

2026-03-26 15:33:13 +00:00