feat(auth): add initial setup flow and harden auth/session handling

This commit is contained in:
neon
2026-03-10 04:17:33 -06:00
parent 17e8ba0f49
commit 86a1b512cc
18 changed files with 599 additions and 109 deletions
+2
View File
@@ -9,6 +9,8 @@ NODE_ENV=development
JWT_SECRET=change-me-in-production
JWT_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d
# Required in production for initial /auth/setup (x-setup-token header)
SETUP_BOOTSTRAP_TOKEN=
# Storage
# App data directory for cover images and generated files.