summaryrefslogtreecommitdiff
path: root/app/cfg
AgeCommit message (Collapse)Author
2025-05-28refactor: remove unused configurationmo khan
2025-05-28refactor: parse headers injected by envoymo khan
2025-05-15feat: remove oauth config and client secret from sparklemo khan
2025-05-15refactor: remove more types from oidc packagemo khan
2025-05-11refactor: use same cookie names as envoy pluginmo khan
2025-05-11feat: add endpoint to reflect JWT bodymo khan
2025-05-11test: test envoy and sparkle via testcontainersmo khan
2025-05-08feat: test out a redirect page in stagingmo khan
2025-05-08feat: use a cookie prefix to lock down the session cookiemo khan
> __Host-: If a cookie name has this prefix, it's accepted in a > Set-Cookie header only if it's also marked with the Secure attribute, > was sent from a secure origin, does not include a Domain attribute, > and has the Path attribute set to /. In other words, the cookie is > domain-locked. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies#cookie_prefixes
2025-05-07refactor: extract helper to log errors consistentlymo khan
2025-04-25refactor: move key pacakge to cfgmo khan