yiekheng 27b7a3df1f feat(web): edge-safe HMAC-signed session cookie ...

signSession + verifySession run on Edge runtime (Web Crypto only).
Verifier checks signature (constant-time compare), expiry, clock-skew
on iat (60s tolerance), token version vs OPERATOR_TOKEN_VERSION env,
and role-shape sanity. 11 unit tests cover round-trip plus every
rejection path attackers could probe.

2026-05-10 17:43:01 +08:00

..

public

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

scripts

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

src

feat(web): edge-safe HMAC-signed session cookie

2026-05-10 17:43:01 +08:00

components.json

feat(web): shadcn/ui init + base components

2026-05-09 22:46:16 +08:00

next-env.d.ts

feat(web): browser notifications for reminder + send-test events

2026-05-10 13:30:40 +08:00

next.config.ts

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

package.json

chore: add bcryptjs to web + db packages

2026-05-10 17:41:06 +08:00

postcss.config.mjs

feat(web): scaffold Next.js 16 app with Tailwind 4 + Geist

2026-05-09 22:40:03 +08:00

tsconfig.json

feat(web): scaffold Next.js 16 app with Tailwind 4 + Geist

2026-05-09 22:40:03 +08:00

vitest.config.ts

test(web): unit tests for accounts-list layout and behaviour

2026-05-10 01:06:38 +08:00