jozamudi cdb25b1aba security: Secure cookie flag (ANIWEB_SECURE, on in run.sh) + kill sessions of deleted accounts ...

- middleware re-verifies the username against users.json per request:
  deleted accounts' signed cookies are rejected immediately
- set_cookie/delete_cookie honor the Secure flag; run.sh sets
  ANIWEB_SECURE=1 so sessions only work through the HTTPS proxy

2026-08-19 16:29:03 +00:00

..

__init__.py

move server code into server/, update docs

2026-08-19 15:33:31 +00:00

app.py

security: Secure cookie flag (ANIWEB_SECURE, on in run.sh) + kill sessions of deleted accounts

2026-08-19 16:29:03 +00:00

upstream.py

move server code into server/, update docs

2026-08-19 15:33:31 +00:00

users.py

multi-user auth (CLI-created accounts), per-user history, test suite

2026-08-19 16:17:56 +00:00