Sebastian Krüger dcf2fbd3d4 feat: enhance session security and freshness ...

- Sliding expiration: reset 24h TTL on every Redis session access
- SameSite=Strict on login and logout cookies (was Lax)
- Secure flag on logout cookie in production (was missing)
- Re-fetch user from DB on every request in buildContext so role/avatar/
  admin changes take effect immediately without requiring re-login

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-07 11:10:01 +01:00

..

src

feat: enhance session security and freshness

2026-03-07 11:10:01 +01:00

drizzle.config.ts

fix: switch backend to CommonJS, generate Drizzle migrations, add migrate script

2026-03-04 18:42:58 +01:00

package.json

chore: relative uploads dir

2026-03-05 11:05:30 +01:00

tsconfig.json

fix: switch backend to CommonJS, generate Drizzle migrations, add migrate script

2026-03-04 18:42:58 +01:00