nexus/server/src
Dale Stubblefield ad55af04cc fix: disable secure cookies for HTTP deployments
Fixes login failing silently on authenticated + private deployments
served over plain HTTP (e.g. Tailscale, LAN). Users can sign up and
sign in, but the session cookie is rejected by the browser so they
are immediately redirected back to the login page.

Better Auth defaults to __Secure- prefixed cookies with the Secure
flag when NODE_ENV=production. Browsers silently reject Secure cookies
on non-HTTPS origins. This detects when PAPERCLIP_PUBLIC_URL uses
http:// and sets useSecureCookies: false so session cookies work
without HTTPS.
2026-03-08 22:00:51 -05:00
..
__tests__ Remove legacy OpenClaw adapter and keep gateway-only flow 2026-03-07 18:50:25 -06:00
adapters Remove legacy OpenClaw adapter and keep gateway-only flow 2026-03-07 18:50:25 -06:00
auth fix: disable secure cookies for HTTP deployments 2026-03-08 22:00:51 -05:00
middleware fix(server): attach raw Error to res.err and avoid pino err key collision 2026-03-07 15:19:03 -06:00
realtime update typing to node v24 from v20 2026-03-05 14:36:00 -03:00
routes Merge pull request #261 from mvanhorn/fix/234-secret-env-redaction 2026-03-07 21:22:00 -06:00
secrets refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
services Merge pull request #261 from mvanhorn/fix/234-secret-env-redaction 2026-03-07 21:22:00 -06:00
storage refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
types feat(server): integrate Better Auth, access control, and deployment mode startup 2026-02-23 14:40:32 -06:00
agent-auth-jwt.ts Implement local agent JWT authentication for adapters 2026-02-18 16:46:45 -06:00
app.ts fix(server): serve cached index.html in SPA catch-all to prevent 500 2026-03-07 16:20:19 -08:00
board-claim.ts refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
config-file.ts refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
config.ts fix: correct env var priority for authDisableSignUp 2026-03-08 10:18:27 +08:00
errors.ts Add server routes for companies, approvals, costs, and dashboard 2026-02-17 09:07:27 -06:00
home-paths.ts Add configurable automatic database backup scheduling 2026-03-04 18:03:23 -06:00
index.ts fix(auth): apply effective trusted origins and honor allowed hostnames in public mode 2026-03-06 15:39:36 -03:00
paths.ts feat(cli): add client commands and home-based local runtime defaults 2026-02-20 07:10:58 -06:00
redaction.ts Implement secrets service with local encryption, redaction, and runtime resolution 2026-02-19 15:43:52 -06:00
startup-banner.ts Add configurable automatic database backup scheduling 2026-03-04 18:03:23 -06:00