mteehan d52a0fad12 fix: check tryRefreshToken result in WS reconnect, clear permissions on logout ...

The token refresh callback in websocket.js ignored its ok parameter, causing
an infinite reconnect loop when the server rejected the refresh attempt. On
failure, redirect to login instead of reconnecting with a cleared token.

clearAuthTokens() now also removes vw:permissions from sessionStorage to
prevent stale permissions from persisting across logout/login cycles. Also
removed duplicate vw:user removeItem call.

2026-07-28 02:44:09 +00:00

..

api

fix: dual-key rate limiting for auth + websocket reconnect guard

2026-07-28 00:54:48 +00:00

static

fix: check tryRefreshToken result in WS reconnect, clear permissions on logout

2026-07-28 02:44:09 +00:00

__init__.py

Initial commit: SSL proxy / firewall appliance

2026-05-07 22:24:24 +00:00

server.py

fix: harden retry JSON parsing and exempt personal auth routes

2026-07-27 20:38:50 +00:00