Rokojori
/
rokojori-auth
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rokojori-auth/source/server
History
Rokojori 07aad6c69e auth: refresh token cookie, rate limiting, delete account, welcome email 
- trust proxy for correct IP behind nginx
- refresh token now set as httpOnly cookie alongside access token
- GET /api/auth/refresh-session for browser-based token refresh
- DELETE /api/auth/me with full cleanup of tokens and cookies
- rate limiting on login (10/15min) and register (5/hr)
- welcome email on registration (non-blocking)
- delete account UI on profile page with two-step confirm

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 		2026-07-13 12:33:39 +02:00
..
email Initial Commit 2026-07-13 05:48:45 +02:00
middleware Initial Commit 2026-07-13 05:48:45 +02:00
routes auth: refresh token cookie, rate limiting, delete account, welcome email 2026-07-13 12:33:39 +02:00
db.ts auth: refresh token cookie, rate limiting, delete account, welcome email 2026-07-13 12:33:39 +02:00
index.ts auth: refresh token cookie, rate limiting, delete account, welcome email 2026-07-13 12:33:39 +02:00
rateLimiter.ts auth: refresh token cookie, rate limiting, delete account, welcome email 2026-07-13 12:33:39 +02:00
roles.ts Initial Commit 2026-07-13 05:48:45 +02:00