Block a user
Appname doesn’t need to be in main and internal/globals both
Completed by PR #34 (merged by sneak). Closing.
refactor: replace Bearer token auth with HttpOnly cookies
Rework complete — removed 3 stale registration references from README.md:
- Line ~215:
session/register request→session request - Line ~221: `session creation, registration, or…
refactor: replace Bearer token auth with HttpOnly cookies
Review: PR #84 — Cookie-Based Auth Refactor (post-rebase)
feat: add per-IP rate limiting to login endpoint
Review: PR #78 — Login Rate Limiting (post-rebase onto db3d23c)
refactor: replace Bearer token auth with HttpOnly cookies
Rebase Complete
Rebased feature/cookie-auth-refactor onto current main (db3d23c) which includes PR #82 (username/hostname/OPER support).
###…
feat: add per-IP rate limiting to login endpoint
Rebased feature/login-rate-limit onto current main (db3d23c).
Conflicts resolved:
README.md— kept both OPER config vars (from PR #82) and…
Move schema_migrations table creation into 000.sql
Rework: Schema versions as INTEGER
Per sneak's review — schema versions should be int, not text.
Changes
internal/database/schema/000.sql:
version TEXT PRIMARY KEY→ `version…
refactor: replace Bearer token auth with HttpOnly cookies
Review: PR #84 — Auth Refactor (post-rework — doc fixes)
feat: add per-IP rate limiting to login endpoint
Review: PR #78 — Login Rate Limiting (post-rebase attempt)
refactor: replace Bearer token auth with HttpOnly cookies
Rework: Fixed ALL documentation inaccuracies about cookie-based auth
Addressing sneak's review feedback on PR #84 (closes [#83](https://git.eeqj.de/sn…