2 Commits

Include renames

Author	SHA1	Message	Date
Orrinandcoderabbitai[bot]	219c9e0634	优化匿名冷启动与公开内容接口的重复回源请求 (#7166) ... * fix: reduce public bootstrap requests and revalidate content * fix(controller): use a weak ETag for revalidated public JSON /api is gzip-compressed by middleware that runs after the handler returns, and the validator is computed over the uncompressed body. The compressed and identity forms of one payload therefore share a validator, which a strong ETag must not do -- it asserts byte-for-byte equality across representations (RFC 9110 8.8.1). Serve W/ instead. Weak comparison ignores W/ on both operands, so etagMatches now strips it from the served validator as well as from each candidate. Stripping only the candidate would make a weak served validator match nothing and silently disable every 304. Vary: Accept-Encoding stays. Weakening the validator makes revalidation correct, but it does not separate the two encodings in a shared cache. * fix(test): align response cookie helper name * fix(auth): revalidate stale route sessions * Update web/src/features/about/api.ts Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * test: remove newly added PR tests --------- Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>	2026-09-03 14:26:35 +08:00
Calcium-Ion	31d70fca39	refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329) ... * refactor(auth): replace dashboard sessions with stateless tokens * feat(auth): harden session issuance and distributed enforcement * fix(proxy): preserve trusted proxy compatibility defaults * refactor: address dashboard auth review feedback * refactor: remove classic frontend and flatten web app	2026-07-20 16:48:43 +08:00