memos

Author	SHA1	Message	Date
Steven	a6c32908a0	refactor(auth): remove legacy session cookie authentication - Remove SessionCookieName and SessionSlidingDuration constants - Remove ExtractSessionCookieFromHeader() function - Remove SessionIDContextKey and GetSessionID() function - Remove sessionID parameter from SetUserInContext() - Remove SessionID field from AuthResult struct - Remove session cookie extraction from middleware - Update documentation to reflect JWT + PAT only auth Session cookies were never being set since migration to refresh token authentication. This change removes ~50 lines of dead code and clarifies that the system uses JWT access tokens, refresh tokens, and PATs only.	6 months ago
Johnny	7932f6d0d0	refactor: user auth improvements (#5360 )	6 months ago
Johnny	40e129b8af	refactor(auth): streamline session authentication and cookie handling	6 months ago
Johnny	edd3ced9bf	refactor: migrate to connect-rpc (#5338 )	6 months ago