This repository has been archived on 2026-02-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

giles a93a456ac5 Remove sso_hint cookie, add sso-clear logout chain ...

sso_hint on .rose-ash.com was blocked by Safari ITP — the exact
problem we're solving. Replaced with redirect chain: account logout
chains through each client app's /auth/sso-clear to clear all
first-party sessions without any cross-domain cookies.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-23 12:17:22 +00:00

..

__init__.py

feat: extract shared infrastructure from shared_lib

2026-02-11 12:45:56 +00:00

cart_identity.py

feat: extract shared infrastructure from shared_lib

2026-02-11 12:45:56 +00:00

context.py

feat: extract shared infrastructure from shared_lib

2026-02-11 12:45:56 +00:00

factory.py

Remove sso_hint cookie, add sso-clear logout chain

2026-02-23 12:17:22 +00:00

http_utils.py

feat: extract shared infrastructure from shared_lib

2026-02-11 12:45:56 +00:00

jinja_setup.py

OAuth SSO infrastructure + account app support

2026-02-23 09:55:27 +00:00

oauth.py

Remove sso_hint cookie, add sso-clear logout chain

2026-02-23 12:17:22 +00:00

urls.py

Make account the OAuth authorization server instead of federation

2026-02-23 11:53:34 +00:00

user_loader.py

feat: extract shared infrastructure from shared_lib

2026-02-11 12:45:56 +00:00