Dorian e574b6dd18 fix: SameSite=Strict → Lax for session cookies (fixes iframe fetch) ...

SameSite=Strict prevents cookies from being sent when iframe content
(like the LND UI at /app/lnd/) fetches endpoints on the parent origin
(/lnd-connect-info). Lax still protects against CSRF on POST requests
but allows same-site GET navigations and fetches from iframes.

This was the root cause of "Failed to fetch" on LND Connect.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-19 15:30:58 +00:00

..

src

fix: SameSite=Strict → Lax for session cookies (fixes iframe fetch)

2026-03-19 15:30:58 +00:00

tests

test: add backend integration test scaffolding with 3 RPC tests

2026-03-10 23:51:22 +00:00

Cargo.toml

feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

2026-03-17 23:56:37 +00:00