3 Commits

Author SHA1 Message Date
fxy
65d28af20b fix: auth_proxy add Secure flag to Set-Cookie 2026-06-15 23:12:13 +08:00
fxy
195954ca19 fix: auth_proxy Cache-Control no-cache + POST redirect fallback
- Login page now sends Cache-Control: no-cache (prevent browser caching)
- POST /login falls back to query string redirect param
- Gitea redirect issue was caused by cached old login page without redirect field
2026-06-15 20:27:31 +08:00
fxy
858a94811c auth: add auth_proxy v2 with cookie session auth
- Add auth_proxy/auth_proxy.py: Python HTTP server, bcrypt password, HMAC-SHA256 token
- Add auth_proxy/auth_proxy.service: systemd service on port 9002
- Update CHANGELOG.md: v1.1.0 with auth_proxy section
- Security: basicauth replaced by session cookie (7 days, HttpOnly, SameSite=Lax)
- Cross-subdomain cookie via Domain=.xybkwd.top
2026-06-15 19:31:37 +08:00