Rokojori
4a72363aaf
Electron fixes: - extractToken (auth-connector): Bearer header checked before cookie — prevents stale Electron session cookie from winning over injected token - JWT_CLOCK_TOLERANCE env var: passed to jwt.verify as clockTolerance; set to 7200 in .env to absorb ~65 min clock skew between Windows dev machine and prod auth server - Startup token refresh: main.ts calls POST /api/auth/refresh before opening main window; shows login on failure instead of opening with expired tokens - Quit-on-login fix: createMainWindow() is async; login-success now awaits it before closing the login window (zero windows → app.quit() race was killing the process) - Credential persistence: email + password stored in userData; remember-me checkbox controls save behaviour; clear button removes saved files; fields pre-fill on load - Electron session cookies cleared in createMainWindow() to avoid stale token reuse CSS: z-index: 10 on .pld-nav (project-list-default) — fixed mobile nav buried under rows Boards: cleared Done lane, added Electron fixes and nav z-index entries; backlog MVP entry for local testing solution; bugs.html: 401-handling bug moved to Done. Outline: auth card updated with extractToken order note and JWT_CLOCK_TOLERANCE docs. History: Friday 18 July entry expanded with session 2 cards. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| auth-connector@cb2fba6e8b | ||
| commands | ||
| components | ||
| editor | ||
| library-ts@98895de241 | ||
| locale-data/en | ||
| locales | ||
| pages | ||
| rojos | ||
| server | ||
| vendor | ||