diguaandCursor cd3ae8c5ba feat(auth): harden auth security and add remember-me login ...

Improve auth hook security: restructure URL classification to fix
/_web/* bypass when requireAuth is active, use HMAC-SHA256 for constant-
time token comparison, remove dead webModeEnabled code.

Improve frontend auth flow: extract initializeApp() with watch-based
re-init after login, add getToken callback for real-time store reads,
unify SSE 401 handling via fetchWithAuth, switch default storage to
sessionStorage, add router guard consuming meta.public.

Add "Remember this device" checkbox on login page with dual
localStorage/sessionStorage strategy and safety warning.

Add 23 unit tests for auth hook matrix and http client.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-02 15:41:21 +08:00

..

cli

feat(auth): harden auth security and add remember-me login

2026-06-02 15:41:21 +08:00

desktop

fix(types): use AIMessageRole type for message role params & strengthen conversation test assertion

2026-05-31 16:56:08 +08:00