Files
timetracker/backend
Simon Franken 946cd35832 Replace IDP token passthrough with backend-issued JWT for iOS auth
iOS clients now exchange the OIDC authorization code for a backend-signed
HS256 JWT via POST /auth/token. All subsequent API requests authenticate
using this JWT as a Bearer token, verified locally — no per-request IDP
call is needed. Web frontend session-cookie auth is unchanged.
2026-02-19 18:45:03 +01:00
..
2026-02-18 16:08:42 +01:00
2026-02-18 19:02:29 +01:00
fix
2026-02-18 19:40:39 +01:00
2026-02-16 10:15:27 +01:00