ga 5b70bc3137 Auth: HttpOnly cookie buhapp_at (без CORS preflight) ... - Login/Register ставят cookie (HttpOnly, Secure, SameSite=Lax) - Middleware читает cookie первым - CORS: AllowCredentials=true - Для прямых API-вызовов остался Authorization Bearer - Legacy ?_t= query fallback		2026-08-20 21:50:28 +00:00
..
auth.go	Auth: HttpOnly cookie buhapp_at (без CORS preflight)	2026-08-20 21:50:28 +00:00
chat.go	Sprint 7: race conditions + read_at + slog	2026-08-20 21:04:56 +00:00
consent.go	Sprint 6: security hardening	2026-08-20 20:42:22 +00:00
handlers.go	Sprint 8.1: /api/v1/debug/log endpoint для клиентских логов	2026-08-20 21:38:27 +00:00
photo.go	Sprint 6.1: photo upload (MinIO) + storage proxy	2026-08-20 20:59:52 +00:00
places.go	Sprint 8: 2GIS tiles + places (бары/рестораны) nearby	2026-08-20 21:11:54 +00:00
reviews.go	Sprint 5: reviews and ratings	2026-08-20 16:20:15 +00:00
telegram.go	Sprint 6: security hardening	2026-08-20 20:42:22 +00:00