fabro/apps/fabro-web
Bryan Helmkamp 31d80373d4 fix: session cookie decryption and add HTTP endpoint logging
Cookie auth was broken because parse_cookie_header used Cookie::parse
which does not percent-decode values. The cookie crate's private jar
percent-encodes on Set-Cookie but Cookie::parse leaves %2F/%3D intact,
making base64 decryption fail silently. Switch to Cookie::parse_encoded.

Also:
- Add tower-http TraceLayer for request/response logging (DEBUG for
  requests, INFO for responses with status and latency)
- Add structured tracing to all web_auth handlers per logging strategy
- Replace eprintln debug calls with tracing::warn
- Update GitHub App manifest homepage URL to https://fabro.sh

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-08 11:46:30 -04:00
..
app fix: session cookie decryption and add HTTP endpoint logging 2026-04-08 11:46:30 -04:00
dist fix: GitHub App setup flow — nullable webhook_secret, double POST, stale restart copy, wrong port 2026-04-08 08:34:39 -04:00
public Add screenshots, workflow diagram, lightbox, and fix logotype viewBox 2026-03-16 10:09:57 -04:00
scripts Cut over Fabro web app to a server-backed SPA 2026-04-01 21:36:01 -07:00
.dockerignore Rename Arc to Fabro in TypeScript/JavaScript 2026-03-12 11:13:18 -04:00
.gitignore Rename Arc to Fabro in TypeScript/JavaScript 2026-03-12 11:13:18 -04:00
bun.lock Rename Arc to Fabro in TypeScript/JavaScript 2026-03-12 11:13:18 -04:00
Dockerfile Rename Arc to Fabro in TypeScript/JavaScript 2026-03-12 11:13:18 -04:00
index.template.html Cut over Fabro web app to a server-backed SPA 2026-04-01 21:36:01 -07:00
package-lock.json rename Arc to Fabro in all Rust crates, symbols, env vars, and supporting files 2026-03-12 12:25:58 -04:00
package.json Cut over Fabro web app to a server-backed SPA 2026-04-01 21:36:01 -07:00
tsconfig.json Fix login route collision after SPA cutover 2026-04-01 21:55:30 -07:00