Dorian a7653d4c8b feat: implement CSRF protection on RPC layer ...

Double-submit cookie pattern: backend generates csrf_token cookie on login
(non-HttpOnly so JS can read it), validates X-CSRF-Token header matches
cookie on all authenticated RPC calls. Returns 403 if missing/mismatched.
Frontend reads cookie and sends header automatically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-11 00:46:52 +00:00

..

archipelago

feat: implement CSRF protection on RPC layer

2026-03-11 00:46:52 +00:00

container

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

container-init

mid coding commit

2026-01-24 22:59:20 +00:00

helpers

mid coding commit

2026-01-24 22:59:20 +00:00

js-engine

mid coding commit

2026-01-24 22:59:20 +00:00

models

mid coding commit

2026-01-24 22:59:20 +00:00

parmanode

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

performance

Update archipelago: API, auth, container, parmanode, performance, security

2026-01-27 22:27:17 +00:00

security

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

startos

mid coding commit

2026-01-24 22:59:20 +00:00

.env.example

Add comprehensive installation and setup documentation

2026-01-27 17:18:21 +00:00

.env.production

Update README and configuration for macOS support

2026-01-28 11:12:19 +00:00

Cargo.lock

feat: electrs standalone install with bitcoin dependency + progress UI

2026-03-08 02:16:02 +00:00

Cargo.toml

Refactor configuration and scripts for Archipelago backend and ISO build

2026-02-01 05:42:05 +00:00