managarten/packages
Till-JS feaf27dd14 feat(auth): implement cross-subdomain SSO for all web apps
Add Single Sign-On (SSO) support across all mana.how subdomains:

- Add trySSO() method to @manacore/shared-auth that exchanges session
  cookies for JWT tokens
- Add /api/v1/auth/session-to-token endpoint to mana-core-auth service
- Update all 15 web apps to try SSO during auth initialization

SSO Flow:
1. User logs in on any app (e.g., calendar.mana.how)
2. Session cookie is set with Domain=.mana.how
3. When visiting another app (e.g., todo.mana.how), it checks for
   local tokens first
4. If no local tokens, tries SSO via session cookie
5. Session cookie is exchanged for JWT tokens via new endpoint
6. User is automatically authenticated

Apps updated: calendar, chat, clock, contacts, manacore, manadeck,
nutriphi, picture, planta, presi, questions, skilltree, storage,
todo, zitare

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:17:04 +01:00
..
bot-services 🧹 chore(bot-services): remove unused CreditConsumeResult import 2026-02-01 15:08:58 +01:00
credit-operations 🐛 fix(mana-core-auth): use BASE_URL as JWT issuer for OIDC compatibility 2026-02-01 13:55:05 +01:00
eslint-config feat: add multi-layered runtime config protection system 2025-12-16 00:28:57 +01:00
mana-core-nestjs-integration 🐛 fix(mana-core-auth): use BASE_URL as JWT issuer for OIDC compatibility 2026-02-01 13:55:05 +01:00
manadeck-database fix(db): use TEXT for user_id columns across entire codebase 2025-12-09 16:30:51 +01:00
matrix-bot-common fix(matrix-bot-common): use authenticated media API for downloads 2026-02-01 04:07:38 +01:00
notify-client fix(notify-client): don't send undefined emailOptions 2026-01-29 23:25:46 +01:00
nutriphi-database improve code quality 2025-12-03 23:42:37 +01:00
shared-api-client ♻️ refactor: remove duplicated code (Quick Wins) 2026-01-29 16:19:18 +01:00
shared-auth feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
shared-auth-stores 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00
shared-auth-ui feat(auth): add resend verification email to registration screen 2026-02-01 12:44:28 +01:00
shared-branding fix(matrix-web): fix sidebar gap and chat scrolling layout 2026-01-29 16:36:24 +01:00
shared-config fix lint 2025-12-04 00:32:13 +01:00
shared-credit-service 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00
shared-credit-ui 🐛 fix(mana-core-auth): use BASE_URL as JWT issuer for OIDC compatibility 2026-02-01 13:55:05 +01:00
shared-drizzle-config 🚸 ux(matrix-web): improve mobile responsiveness 2026-01-29 17:37:35 +01:00
shared-errors Fix wrong type 2025-12-04 23:25:25 +01:00
shared-feedback-service fix lint 2025-12-04 00:32:13 +01:00
shared-feedback-types improve code quality 2025-12-03 23:42:37 +01:00
shared-feedback-ui chore: various UI improvements and fixes 2025-12-10 20:05:02 +01:00
shared-help-content feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
shared-help-mobile feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
shared-help-types feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
shared-help-ui feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
shared-i18n feat(auth): add resend verification email to registration screen 2026-02-01 12:44:28 +01:00
shared-icons improve code quality 2025-12-03 23:42:37 +01:00
shared-landing-ui 🔥 chore: remove maerchenzauber from codebase 2026-01-27 15:57:19 +01:00
shared-logger 💄 style(matrix-web): redesign login page to match central auth UI 2026-01-29 17:43:51 +01:00
shared-nestjs-auth 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00
shared-nestjs-health 🚀 ci: add mana-search and api-gateway to Docker builds 2026-01-29 18:34:18 +01:00
shared-nestjs-metrics feat: add monitoring dashboard (Prometheus + Grafana + Umami + Admin) 2026-01-23 15:31:39 +01:00
shared-nestjs-setup 💄 style(matrix-web): redesign login page to match central auth UI 2026-01-29 17:43:51 +01:00
shared-profile-ui improve code quality 2025-12-03 23:42:37 +01:00
shared-splitscreen ️ fix: resolve all svelte-check a11y warnings across web apps 2025-12-15 19:09:01 +01:00
shared-storage 🔀 merge: integrate till-dev into main 2026-01-18 15:40:43 +01:00
shared-stores ♻️ refactor: create createSimpleNavigationStores and migrate 10 apps 2026-01-29 17:04:32 +01:00
shared-subscription-types improve code quality 2025-12-03 23:42:37 +01:00
shared-subscription-ui improve code quality 2025-12-03 23:42:37 +01:00
shared-supabase Fix wrong type 2025-12-04 23:25:25 +01:00
shared-tags 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00
shared-tailwind feat(ui): add elevation system for overlays and modals 2025-12-13 15:00:33 +01:00
shared-theme refactor(theme): remove custom theme editor and community themes 2025-12-12 02:34:43 +01:00
shared-theme-ui feat(shared-ui): add FilterDropdown export and InputBar FAB support 2025-12-14 21:32:03 +01:00
shared-tsconfig 🔧 chore: create @manacore/shared-tsconfig and migrate 13 backends 2026-01-29 16:38:57 +01:00
shared-types feat(contacts): integrate contacts into Todo and Calendar apps 2025-12-11 18:14:35 +01:00
shared-ui 🚸 ux(matrix-web): improve mobile responsiveness 2026-01-29 17:37:35 +01:00
shared-utils ♻️ refactor: remove duplicated code (Quick Wins) 2026-01-29 16:19:18 +01:00
shared-vite-config 🐛 fix(mana-core-auth): add explicit urlencoded body parser for OAuth token endpoint 2026-02-01 03:56:17 +01:00
test-config improve code quality 2025-12-03 23:42:37 +01:00