CyberMind-FR 5c46ad864a fix(auth): require_jwt tries Bearer then cookie so a stale token can't shadow a live session ... A present-but-stale localStorage Bearer was used exclusively, ignoring a valid secubox_session cookie, so every webui 401'd into a /login.html loop. Now both sources are tried (Bearer first, then cookie); 401 only if neither validates. Strictly more permissive — no regression for working Bearer clients. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>		2026-07-16 10:12:32 +02:00
..
apparmor
audit
nginx	fix(core): raise shared nginx proxy_read_timeout 30s → 300s	2026-07-14 08:59:01 +02:00
secubox_core	fix(auth): require_jwt tries Bearer then cookie so a stale token can't shadow a live session	2026-07-16 10:12:32 +02:00