managarten/apps
Till-JS feaf27dd14 feat(auth): implement cross-subdomain SSO for all web apps
Add Single Sign-On (SSO) support across all mana.how subdomains:

- Add trySSO() method to @manacore/shared-auth that exchanges session
  cookies for JWT tokens
- Add /api/v1/auth/session-to-token endpoint to mana-core-auth service
- Update all 15 web apps to try SSO during auth initialization

SSO Flow:
1. User logs in on any app (e.g., calendar.mana.how)
2. Session cookie is set with Domain=.mana.how
3. When visiting another app (e.g., todo.mana.how), it checks for
   local tokens first
4. If no local tokens, tries SSO via session cookie
5. Session cookie is exchanged for JWT tokens via new endpoint
6. User is automatically authenticated

Apps updated: calendar, chat, clock, contacts, manacore, manadeck,
nutriphi, picture, planta, presi, questions, skilltree, storage,
todo, zitare

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:17:04 +01:00
..
calendar feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
chat feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
clock feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
contacts feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
context 🔧 chore: enforce monorepo best practices with automated validation 2025-12-25 17:57:00 +01:00
docs 🌙 feat(docs): set dark mode as default theme 2026-01-29 18:22:23 +01:00
manacore feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
manadeck feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
matrix docs(auth): add SSO documentation and test credentials 2026-02-02 04:09:07 +01:00
nutriphi feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
picture feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
planta feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
presi feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
questions feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
skilltree feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
storage feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
todo feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00
zitare/apps feat(auth): implement cross-subdomain SSO for all web apps 2026-02-02 13:17:04 +01:00