Commit Graph

5 Commits

Author SHA1 Message Date
cesnimda c9f1437860 fix(proxy): honor upstream X-Forwarded-Proto so OAuth redirect is https behind traefik
CI / backend (pull_request) Has been cancelled
CI / frontend (pull_request) Has been cancelled
CI / format (pull_request) Has been cancelled
CI / db-tests (pull_request) Has been cancelled
Security / secrets (pull_request) Successful in 6s
Security / dependencies (pull_request) Successful in 1m12s
Security / sast (pull_request) Failing after 5s
The SPA nginx overwrote the reverse proxy's X-Forwarded-Proto with $scheme (http on the
traefik->frontend hop), so the API built http:// OAuth redirects that Google rejects. Map
the incoming proto through (fallback to $scheme for direct access). Needed for login via
https://inboxintel.cesnimda.uk behind traefik.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-10 22:03:23 +02:00
cesnimda b905c93884 fix(security): audit batch B — SPA CSP + vite upgrade (#21)
CI / backend (push) Successful in 52s
CI / frontend (push) Successful in 15s
Deploy Staging / deploy (push) Successful in 45s
CI / backend (pull_request) Successful in 56s
CI / frontend (pull_request) Successful in 11s
Security / secrets (push) Successful in 4s
Security / dependencies (push) Successful in 54s
Security / secrets (pull_request) Successful in 4s
Security / dependencies (pull_request) Successful in 54s
2026-07-02 03:24:57 +02:00
cesnimda fe5920919f feat: landing page + logo, dev-mode banner + sync cap, non-blocking sync with progress splash 2026-06-30 16:58:35 +02:00
cesnimda dcb939e4f2 deploy: one-command scripts to build+run from deploy/.env 2026-06-30 16:16:16 +02:00
cesnimda f43ef5f945 chore: init project 2026-06-30 15:53:32 +02:00