4 Commits

Author	SHA1	Message	Date
Rafael Foster	08199495b6	A lot of change in this commit. Changing the dashboard to get more data and the new features added	2026-04-26 21:18:59 -03:00
Ulas	8d99c3d2d6	fix: resolve iOS PWA session/CSRF issues causing forbidden errors ... - Renew CSRF cookie on /auth/me (first call after iOS PWA resume) - Add try-catch + hex validation to CSRF middleware for corrupted tokens - Auto-retry state-changing requests on 403 by refreshing CSRF token - Add 200ms delay before SW controllerchange reload to prevent blank page on iOS	2026-04-14 17:37:22 +02:00
Ulas	41e88e0acf	Add PWA native feel: manifest, meta tags, install prompt, SW optimization, dynamic theme-color ... Configure manifest.json with scope, maskable icons, and categories. Add iOS/Android meta tags for standalone behavior. Create pwa.css for native touch/scroll handling and safe area insets. Add oikos-install-prompt Web Component with Chrome install flow and iOS guidance. Optimize service worker with network-first navigation and expanded precache (v19). Add dynamic theme-color per route and modal overlay dimming in standalone mode. Generate placeholder icons via sharp script. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-29 15:35:01 +02:00
ulsklyc	b08ba42b89	fix: CSP-Verletzung durch Inline-Script (SW-Registrierung) ... Das Inline-Script in index.html für die Service-Worker-Registrierung wurde von der Content-Security-Policy blockiert (kein 'unsafe-inline' in script-src). Ausgelagert nach /sw-register.js ('self' erlaubt). Außerdem: rel="preload" → rel="modulepreload" für ES-Module (korrekte Browser-Semantik, behebt die Preload-Warnungen in der Console). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-25 09:36:10 +01:00