Oxicloud

Files

T

BillionClaw 2daee68d20 fix(auth): resolve CSP blocking and session refresh loop

Fix two issues causing login loop after successful admin setup:

1. CSP blocking inline styles: The frontend JavaScript dynamically sets
   inline styles (e.g., element.style.display = 'none') for UI state
   management. The CSP header only allowed 'self' for style-src, blocking
   these dynamic styles. Added 'unsafe-inline' to style-src directive.

2. Session refresh 401 errors: The cookie Secure flag defaulted to true
   when OXICLOUD_BASE_URL was not set, causing cookies to not be sent
   over HTTP in Docker deployments. Changed the default to false when
   the base URL is not explicitly set to HTTPS, with clear logging to
   guide users to set OXICLOUD_COOKIE_SECURE=true for production.

Fixes #203

2026-03-17 06:14:02 +08:00

api

fix(auth): resolve CSP blocking and session refresh loop

2026-03-17 06:14:02 +08:00

middleware

fix: resolve clippy warnings and rustfmt issues for CI compliance

2026-03-09 14:34:07 +01:00

nextcloud

Fix Nextcloud sync conflict by using content-hash ETags

2026-03-15 14:14:24 -04:00

web

fix: resolve clippy warnings and rustfmt issues for CI compliance