Commit Graph
12 Commits
Author SHA1 Message Date
greeneclipse 8983cfc8a1 update see calss 2026-08-23 22:03:57 +02:00
greeneclipse 0c154254c3 major fixes 2026-08-22 18:51:17 +02:00
greeneclipseandClaude Fable 5 6facfbb0aa Self-heal duplicate session cookies from the Domain rollout
Browsers that logged in before the session cookie became Domain-scoped
still hold the old host-only descrybe_session for api.descrybe.io. They
then send BOTH cookies — older (stale) first — and Go reads the first
match, so the stale relic shadows the fresh Domain cookie and every
request 401s even immediately after a successful login. Clearing
browser cookies fixed it manually; users should never have to.

New DedupeSessionCookies middleware (mounted before scs LoadAndSave):
when duplicate session cookies arrive, pick the token that resolves in
the session store, rewrite the Cookie header to just that one, expire
the host-only relic (Set-Cookie without Domain only touches the
host-only variant), and re-issue the surviving token on the canonical
Domain cookie. One request converges the browser to a single cookie.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 01:19:46 +02:00
greeneclipse 321f11e817 fix 2026-08-17 11:30:14 +02:00
greeneclipse fe94c2fb9c fix 2026-08-17 09:33:07 +02:00
greeneclipse 93dc70123c fix 2026-08-17 00:39:25 +02:00
greeneclipse a94a5aaad7 fix 2026-08-16 18:36:56 +02:00
greeneclipse 532d439c41 fixes 2026-08-16 16:57:36 +02:00
greeneclipse 52f27e30fc fixes 2026-08-16 11:37:42 +02:00
greeneclipse dc9ea628c1 fix 2026-08-14 01:38:34 +02:00
greeneclipse 58578fd010 fix 2026-08-13 21:01:49 +02:00
greeneclipse 8580c996c3 Initial commit of Descrybe v2 without local scratch artifacts.
Drop one-shot tmp/axe scripts and agent i18n scratch so the Gitea tree is deployable.
2026-08-09 22:47:43 +02:00