managarten/apps/skilltree/apps/web
Till-JS feaf27dd14 feat(auth): implement cross-subdomain SSO for all web apps
Add Single Sign-On (SSO) support across all mana.how subdomains:

- Add trySSO() method to @manacore/shared-auth that exchanges session
  cookies for JWT tokens
- Add /api/v1/auth/session-to-token endpoint to mana-core-auth service
- Update all 15 web apps to try SSO during auth initialization

SSO Flow:
1. User logs in on any app (e.g., calendar.mana.how)
2. Session cookie is set with Domain=.mana.how
3. When visiting another app (e.g., todo.mana.how), it checks for
   local tokens first
4. If no local tokens, tries SSO via session cookie
5. Session cookie is exchanged for JWT tokens via new endpoint
6. User is automatically authenticated

Apps updated: calendar, chat, clock, contacts, manacore, manadeck,
nutriphi, picture, planta, presi, questions, skilltree, storage,
todo, zitare

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:17:04 +01:00
..
src feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
static feat(skilltree): add SkillTree MVP - gamified skill tracking app 2026-01-28 20:32:05 +00:00
.env.production.example feat(skilltree): connect web app to backend API 2026-01-29 11:05:32 +00:00
Dockerfile feat(skilltree): add NestJS backend with Docker deployment 2026-01-28 23:59:50 +00:00
package.json 🐛 fix: resolve tsconfig issues across all NestJS backends 2026-02-01 03:47:17 +01:00
svelte.config.js feat(skilltree): add SkillTree MVP - gamified skill tracking app 2026-01-28 20:32:05 +00:00
tsconfig.json feat(skilltree): add SkillTree MVP - gamified skill tracking app 2026-01-28 20:32:05 +00:00
vite.config.ts 🐛 fix(mana-core-auth): add explicit urlencoded body parser for OAuth token endpoint 2026-02-01 03:56:17 +01:00
vitest.config.ts test(skilltree): add comprehensive test suite for web and backend 2026-01-29 12:43:19 +01:00