Rokojori
/
rokojori-auth
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rokojori-auth/source/pages
History
Rokojori 07aad6c69e auth: refresh token cookie, rate limiting, delete account, welcome email 
- trust proxy for correct IP behind nginx
- refresh token now set as httpOnly cookie alongside access token
- GET /api/auth/refresh-session for browser-based token refresh
- DELETE /api/auth/me with full cleanup of tokens and cookies
- rate limiting on login (10/15min) and register (5/hr)
- welcome email on registration (non-blocking)
- delete account UI on profile page with two-step confirm

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 		2026-07-13 12:33:39 +02:00
..
forgot-password.html Initial Commit 2026-07-13 05:48:45 +02:00
login.html Initial Commit 2026-07-13 05:48:45 +02:00
profile.html auth: refresh token cookie, rate limiting, delete account, welcome email 2026-07-13 12:33:39 +02:00
register.html Initial Commit 2026-07-13 05:48:45 +02:00
reset-password.html Initial Commit 2026-07-13 05:48:45 +02:00