Commit Graph

15 Commits

Author SHA1 Message Date
Yunxiao Xu
2cfbc5d1d0 fix(orchestrator): Apply refinements from code review 2026-02-23 19:32:45 -08:00
Yunxiao Xu
cc927e2a90 fix(auth): Resolve lint regressions and add security regression test 2026-02-18 14:56:17 -08:00
Yunxiao Xu
6131f27142 refactor: Address technical debt in auth refresh implementation 2026-02-18 14:36:10 -08:00
Yunxiao Xu
d11f3dd00c feat(auth): Implement /refresh endpoint and update login/register 2026-02-18 13:37:16 -08:00
Yunxiao Xu
626b644740 feat(auth): Implement create_refresh_token and add tests 2026-02-18 13:25:36 -08:00
Yunxiao Xu
ece12f951a fix: Address second code review findings (test isolation, frontend type safety) 2026-02-17 02:11:04 -08:00
Yunxiao Xu
e4513fcf18 test: Resolve DeprecationWarnings in theme tests by using client.cookies.set 2026-02-17 01:03:50 -08:00
Yunxiao Xu
a64a582110 test: Update auth cookie tests to support theme preference 2026-02-17 00:52:49 -08:00
Yunxiao Xu
de25dc8a4d feat: Add light/dark mode support with backend persistence 2026-02-17 00:32:15 -08:00
Yunxiao Xu
1cf00d0b3f test(api): Add extended agent stream tests and fix type annotations 2026-02-15 18:52:26 -08:00
Yunxiao Xu
5b9d644fe5 feat(api): Synchronize history and summary from DB in chat stream 2026-02-15 04:11:42 -08:00
Yunxiao Xu
68c0985482 feat(auth): Complete OIDC security refactor and modernize test suite
- Refactored OIDC flow to implement PKCE, state/nonce validation, and BFF pattern.
- Centralized configuration in Settings class (DEV_MODE, FRONTEND_URL, OIDC_REDIRECT_URI).
- Updated auth routers to use conditional secure cookie flags based on DEV_MODE.
- Modernized and cleaned up test suite by removing legacy Streamlit tests.
- Fixed linting errors and unused imports across the backend.
2026-02-15 02:50:26 -08:00
Yunxiao Xu
0dfdef738d fix(backend): Refactor OIDC callback and auth dependency to correctly handle cookies and prefix all API routes with /api/v1. 2026-02-12 01:26:28 -08:00
Yunxiao Xu
49a9da7c0c feat(backend): Implement /api/v1 prefix and HttpOnly cookie-based auth 2026-02-11 21:57:29 -08:00
Yunxiao Xu
7a69133e26 Refactor: Move backend files to backend/ directory and split .gitignore 2026-02-11 17:40:44 -08:00