sol 2d493d5c34 feat: add Mattermost session auth for browser requests ...

- Add dual auth path in ServeHTTP: shared secret (daemon) OR Mattermost session (browser)
- Read-only endpoints (GET /sessions, GET /health) accept either auth method
- Write endpoints (POST, PUT, DELETE) still require shared secret
- Browser requests authenticated via Mattermost-User-Id header (auto-injected by MM server)
- Unauthenticated requests now properly rejected with 401

Fixes: Issue #5 Phase 1 - RHS Panel auth fix

2026-03-09 14:19:39 +00:00

..

public

feat: RHS panel + channel header button + public icon

2026-03-08 20:13:08 +00:00

api.go

feat: add Mattermost session auth for browser requests

2026-03-09 14:19:39 +00:00

configuration.go

fix: remove dead delete+recreate and pin code, add poll fallback test

2026-03-07 20:31:32 +00:00

go.mod

fix: remove dead delete+recreate and pin code, add poll fallback test

2026-03-07 20:31:32 +00:00

go.sum

fix: remove dead delete+recreate and pin code, add poll fallback test

2026-03-07 20:31:32 +00:00

main.go

fix: remove dead delete+recreate and pin code, add poll fallback test

2026-03-07 20:31:32 +00:00

plugin.go

feat: RHS panel initial fetch, floating widget, session cleanup (#5)

2026-03-09 14:15:04 +00:00

store.go

feat: RHS panel initial fetch, floating widget, session cleanup (#5)

2026-03-09 14:15:04 +00:00

websocket.go

fix: persistent daemon startup, plugin integration, mobile fallback

2026-03-08 07:42:27 +00:00