Ben
a30c4d8ebd
feat(dashboard-auth): cookie helpers for session_at/session_rt/pkce
...
Phase 3, Task 3.1. Three cookies:
- hermes_session_at: OAuth access token (HttpOnly, TTL = token TTL)
- hermes_session_rt: OAuth refresh token (HttpOnly, 30d max-age)
- hermes_session_pkce: PKCE state + verifier + provider hint (10min)
All SameSite=Lax + Path=/. Secure flag is set ONLY when the request
scheme is https — uvicorn proxy_headers=True (enabled in gated mode at
Phase 3.5) rewrites scheme from X-Forwarded-Proto so Fly's TLS
terminator works.
2026-05-27 02:12:27 -07:00
..
2026-05-24 23:23:12 -07:00
2026-05-18 10:14:38 -07:00
2026-05-27 01:52:34 -07:00
2026-05-27 00:43:32 -07:00
2026-05-26 14:09:37 -07:00
2026-05-25 12:25:06 +10:00
2026-05-22 14:21:41 -07:00
2026-05-27 01:56:55 -07:00
2026-05-27 02:12:27 -07:00
2026-05-17 23:28:45 -07:00
2026-05-17 02:29:41 -07:00
2026-05-22 14:21:41 -07:00
2026-05-27 02:07:21 -07:00
2026-05-27 00:43:32 -07:00
2026-05-27 02:06:21 -07:00
2026-05-14 22:27:09 -07:00
2026-05-19 00:11:44 -07:00
2026-05-18 21:07:03 -07:00
2026-05-27 00:43:32 -07:00
2026-05-17 02:29:41 -07:00
2026-05-27 00:43:32 -07:00
2026-05-25 03:06:39 -07:00
2026-05-18 21:43:59 -07:00
2026-05-12 20:46:04 -07:00
2026-05-25 15:18:55 -07:00
2026-05-14 14:51:07 -07:00
2026-05-08 14:43:13 -07:00
2026-05-20 22:56:55 -07:00
2026-05-19 01:28:32 -07:00
2026-05-09 02:09:35 -07:00
2026-05-23 01:33:42 -07:00
2026-05-14 09:05:31 -07:00
2026-05-14 07:08:45 -07:00
2026-05-07 13:04:08 -07:00
2026-05-08 14:27:40 -07:00
2026-05-17 02:29:41 -07:00
2026-05-07 13:41:16 -07:00
2026-05-22 15:16:15 -07:00
2026-05-15 10:36:38 +05:30
2026-05-16 12:15:45 -07:00
2026-05-07 06:35:54 -07:00
2026-05-27 00:43:32 -07:00
2026-05-21 16:40:04 +05:30
2026-05-16 00:57:39 -07:00
2026-05-18 17:39:50 +00:00
2026-05-07 13:04:08 -07:00
2026-05-17 02:29:41 -07:00
2026-05-14 08:03:33 -07:00
2026-05-07 05:46:05 -07:00
2026-05-26 20:51:59 -07:00