buhapp-backend/internal/auth
ga 5b70bc3137 Auth: HttpOnly cookie buhapp_at (без CORS preflight)
- Login/Register ставят cookie (HttpOnly, Secure, SameSite=Lax)
- Middleware читает cookie первым
- CORS: AllowCredentials=true
- Для прямых API-вызовов остался Authorization Bearer
- Legacy ?_t= query fallback
2026-08-20 21:50:28 +00:00
..
jwt.go Sprint 5: reviews and ratings 2026-08-20 16:20:15 +00:00
middleware.go Auth: HttpOnly cookie buhapp_at (без CORS preflight) 2026-08-20 21:50:28 +00:00