Dorian 6487ae3673 fix: cookies Secure flag based on X-Forwarded-Proto, not dev_mode ...

Secure flag on session cookies broke HTTP LAN access — browsers refuse
to send Secure cookies over plain HTTP, causing 401 redirect loop.

Fix: check X-Forwarded-Proto header. Only set Secure when request came
over HTTPS. HTTP on LAN works, HTTPS still gets Secure cookies.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 11:34:29 +00:00

..

src

fix: cookies Secure flag based on X-Forwarded-Proto, not dev_mode

2026-03-28 11:34:29 +00:00

tests

test: add backend integration test scaffolding with 3 RPC tests

2026-03-10 23:51:22 +00:00

Cargo.toml

chore: remove dead core/parmanode crate

2026-03-26 15:33:13 +00:00