giles e1f13abc7f Fix middleware ordering: device_id must be outermost ...

FastAPI runs the last-registered middleware first on request.
device_id_middleware was inner, so silent_auth_check's early
redirect bypassed it — cookie never set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-24 00:50:24 +00:00

..

repositories

Add modular app structure for L1 server refactoring

2026-01-11 07:08:08 +00:00

routers

Add AP inbox endpoint + device auth signaling

2026-02-24 00:41:33 +00:00

services

Add CI/CD workflow

2026-02-06 10:45:13 +00:00

templates

Replace L2 JWT auth with OAuth SSO via account.rose-ash.com

2026-02-23 23:26:17 +00:00

utils

Add AP inbox endpoint + device auth signaling

2026-02-24 00:41:33 +00:00

__init__.py

Fix middleware ordering: device_id must be outermost

2026-02-24 00:50:24 +00:00

config.py

Replace L2 JWT auth with OAuth SSO via account.rose-ash.com

2026-02-23 23:26:17 +00:00

dependencies.py

Replace L2 JWT auth with OAuth SSO via account.rose-ash.com

2026-02-23 23:26:17 +00:00

types.py

Fix item visibility bugs and add effects web UI

2026-01-12 12:01:54 +00:00