| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-01-20 | Add CSRF protection and auth unit tests | Peter Stone | |
| Add CSRF token middleware for state-changing request protection, integrate tokens into templates and HTMX headers, and add unit tests for authentication service and handlers. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> | |||
| 2026-01-20 | Add session-based authentication | Peter Stone | |
| Implement secure authentication using scs session manager with SQLite backing store and bcrypt password hashing. - Add users and sessions tables (migration 004) - Create internal/auth package with Service, Middleware, and Handlers - Protect all routes except /login, /logout, /static/* - Add login page template and logout button to dashboard - Default credentials: admin/changeme (configurable via env vars) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> | |||
