Ulas 8d99c3d2d6 fix: resolve iOS PWA session/CSRF issues causing forbidden errors ...

- Renew CSRF cookie on /auth/me (first call after iOS PWA resume)
- Add try-catch + hex validation to CSRF middleware for corrupted tokens
- Auto-retry state-changing requests on 403 by refreshing CSRF token
- Add 200ms delay before SW controllerchange reload to prevent blank page on iOS

2026-04-14 17:37:22 +02:00

..

middleware

fix: resolve iOS PWA session/CSRF issues causing forbidden errors

2026-04-14 17:37:22 +02:00

routes

fix: restore weather widget position - display directly below greeting banner

2026-04-14 08:52:00 +02:00

services

fix: timezone-aware CalDAV sync and English as i18n fallback (#43)

2026-04-13 09:20:27 +02:00

auth.js

fix: resolve iOS PWA session/CSRF issues causing forbidden errors

2026-04-14 17:37:22 +02:00

db-schema-test.js

fix(imports): convert require() to ESM import for randomBytes in auth.js

2026-04-03 23:00:38 +02:00

db.js

feat(meals): add optional recipe link to meal cards (#18)

2026-04-05 18:03:05 +02:00

index.js

fix: default TRUST_PROXY to 1 for Docker+reverse-proxy setups (#46)

2026-04-14 09:04:06 +02:00

logger.js

fix(imports): convert require() to ESM import for randomBytes in auth.js

2026-04-03 23:00:38 +02:00