Jared Wolff 34e7b9dfa8 fix(profile): add credentials to fetch calls so auth cookies are sent ...

Profile page showed "Not Authenticated" because fetch calls to
/api/auth/me and /api/auth/change-password were missing
credentials: 'same-origin', preventing HttpOnly cookies from being sent.

2026-03-05 13:43:06 -05:00

..

app

fix(auth): await logout fetch to prevent token refresh race condition

2026-03-05 13:43:06 -05:00

core

security: fix vulnerabilities 1-7 from security audit

2026-03-05 13:15:34 +01:00

features

feat(security): HttpOnly cookies + CSP headers + CSRF double-submit protection

2026-03-03 01:10:50 +01:00

views

fix(profile): add credentials to fetch calls so auth cookies are sent

2026-03-05 13:43:06 -05:00