Maurice 0dde01baa2 fix(oidc): sign in after SSO on a success flag, not the deprecated token ...

The token in the sign-in bodies was declared deprecated and "read by
nothing of ours", but the web client still decided an SSO sign-in by
reading data.token from GET /api/auth/oidc/exchange, an endpoint the
deprecation notice left out. Removing the field later, as documented,
would have broken SSO sign-in.

The exchange now answers { success: true, token } and the login hook
signs in when the response is OK and success is true, so it never reads
token. The field stays for API clients and is now on the deprecation
list in the API docs, the controller comments, server/CLAUDE.md and the
wiki (Security-Hardening, OIDC-SSO). Adding a field to the body breaks
no existing client.

2026-10-08 18:44:00 +02:00

..

e2e

test(e2e): the iPad case checks what broke #1432, the guides read today's texts

2026-10-08 00:01:43 +00:00

public

docs(help): new pictures for every screen that changed, guides for the release's new tasks, texts and translations to match

2026-10-01 22:09:58 +02:00

scripts

ci(client): fail the count ratchets on an entry above the tree

2026-10-08 14:11:54 +02:00

src

fix(oidc): sign in after SSO on a success flag, not the deprecated token

2026-10-08 18:44:00 +02:00

tests

test(offline): name the v6 upgrade case for what v6 does

2026-10-08 18:38:29 +02:00

.gitignore

feat(help): guides for what TREK talks to, and a seed that follows the day

2026-09-24 14:06:37 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

docs(offline): narrow the rollback promise for newer-format writes

2026-10-08 18:38:29 +02:00

eslint.config.mjs

fix(ui): the context menu answers the keyboard and closes when the page moves

2026-10-07 17:03:47 +02:00

index.html

fix(pwa): recover from a dead chunk and a broken precache after an update (#2524)

2026-09-26 10:36:02 +02:00

package.json

build: pin the Node major in .nvmrc and declare the supported range

2026-10-08 13:04:43 +02:00

playwright.config.ts

docs(wiki): the pictures that were missing, and the follow-ups of the rewrite

2026-09-28 12:19:49 +02:00

postcss.config.js

Initial commit — NOMAD (Navigation Organizer for Maps, Activities & Destinations)

2026-03-18 23:58:08 +01:00

rtlTextAlias.js

fix(journey): the video player brings its own icons instead of asking cdn.plyr.io

2026-09-21 11:02:01 +02:00

tailwind.config.js

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

vite.config.js

fix(docker): take the version from the image, not from the container's env

2026-10-07 15:57:52 +02:00

vitest.config.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00