Steven a6c32908a0 refactor(auth): remove legacy session cookie authentication ... - Remove SessionCookieName and SessionSlidingDuration constants - Remove ExtractSessionCookieFromHeader() function - Remove SessionIDContextKey and GetSessionID() function - Remove sessionID parameter from SetUserInContext() - Remove SessionID field from AuthResult struct - Remove session cookie extraction from middleware - Update documentation to reflect JWT + PAT only auth Session cookies were never being set since migration to refresh token authentication. This change removes ~50 lines of dead code and clarifies that the system uses JWT access tokens, refresh tokens, and PATs only.		2025-12-19 00:09:08 +08:00
..
api/v1	refactor(auth): remove legacy session cookie authentication	2025-12-19 00:09:08 +08:00
fileserver	refactor(auth): remove legacy session cookie authentication	2025-12-19 00:09:08 +08:00
frontend	fix(server): reduce static asset cache to prevent stale files after redeploy	2025-10-28 07:55:02 +08:00
rss	refactor: simplify theme/locale to user preferences and improve initialization	2025-12-02 09:08:46 +08:00