managarten/services/mana-core-auth/src/auth
Till JS eb859c18bc fix(auth): use SameSite=None for cross-subdomain SSO
SameSite=Lax only sends cookies on top-level navigations (link clicks),
not on programmatic fetch() requests. SSO relies on fetch() with
credentials:'include' from app subdomains to auth.mana.how, so
SameSite=None is required when COOKIE_DOMAIN is set.

Falls back to Lax for local development (no COOKIE_DOMAIN).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-20 18:55:34 +01:00
..
dto fix(auth): align reset-password min length to 8 characters 2026-03-17 12:22:56 +01:00
services feat(auth): add audit logging, account lockout, and API key rate limiting 2026-03-19 22:09:58 +01:00
stores 🐛 fix(auth): implement password reset email link handler 2026-01-28 15:49:33 +01:00
types fix(manacore-web): add missing packages to Dockerfile 2026-02-17 13:43:08 +01:00
auth.controller.spec.ts feat(auth): add audit logging, account lockout, and API key rate limiting 2026-03-19 22:09:58 +01:00
auth.controller.ts feat(auth): add audit logging, account lockout, and API key rate limiting 2026-03-19 22:09:58 +01:00
auth.module.ts feat(auth): add audit logging, account lockout, and API key rate limiting 2026-03-19 22:09:58 +01:00
better-auth-passthrough.controller.ts feat(mana-core-auth): add /api/auth/get-session endpoint for SSO 2026-02-02 16:27:39 +01:00
better-auth.config.ts fix(auth): use SameSite=None for cross-subdomain SSO 2026-03-20 18:55:34 +01:00
jwt-validation.spec.ts fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
matrix-session.controller.ts feat(bots): enable Redis SSO for todo-bot and calendar-bot 2026-02-02 14:51:23 +01:00
oidc-login.controller.ts fix(mana-core-auth): use Better Auth native sign-in for OIDC login 2026-01-30 16:57:52 +01:00
oidc.controller.ts feat(mana-core-auth): auto-link Matrix users on OIDC login 2026-02-02 16:50:28 +01:00
sso-config.spec.ts fix(auth): add missing trusted origins for cross-app SSO 2026-03-19 21:17:34 +01:00
sso-session-to-token.spec.ts fix(auth): add missing trusted origins for cross-app SSO 2026-03-19 21:17:34 +01:00