Oxicloud

Files

T

BillionClaw 2daee68d20 fix(auth): resolve CSP blocking and session refresh loop

Fix two issues causing login loop after successful admin setup:

1. CSP blocking inline styles: The frontend JavaScript dynamically sets
   inline styles (e.g., element.style.display = 'none') for UI state
   management. The CSP header only allowed 'self' for style-src, blocking
   these dynamic styles. Added 'unsafe-inline' to style-src directive.

2. Session refresh 401 errors: The cookie Secure flag defaulted to true
   when OXICLOUD_BASE_URL was not set, causing cookies to not be sent
   over HTTP in Docker deployments. Changed the default to false when
   the base URL is not explicitly set to HTTPS, with clear logging to
   guide users to set OXICLOUD_COOKIE_SECURE=true for production.

Fixes #203

2026-03-17 06:14:02 +08:00

application

Fix Nextcloud sync conflict by using content-hash ETags

2026-03-15 14:14:24 -04:00

common

fix: ARMv7 32-bit compilation overflow

2026-03-17 04:39:18 +08:00

domain

fix(calendar): change owner_id from String to Uuid type

2026-03-17 02:58:34 +08:00

infrastructure

fix(calendar): change owner_id from String to Uuid type