Coderbot 445da9f5fc fix: cross-subdomain SSO auto-login for *arr services ...

- Set Domain=.sami on session + CSRF cookies so browsers send them to all subdomains
- This fixes Caddy forward_auth returning 401 for radarr/sonarr/prowlarr
- Fix login URL concatenation bug (radarr.samilogin -> radarr.sami/login)
- Fix getSetCookie() missing from _httpsFetch/_httpFetch response objects
- Fix array/string handling for set-cookie header in session-handlers fallback
- Refactor csrf-protection to createCSRFMiddleware() factory with cookieDomain support
- Pass renewCSRFToken through middleware deps chain to TOTP route

2026-05-23 16:15:56 -07:00

..

__tests__

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

assets

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

ca

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

generated-certs

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pki

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pylon

fix: add pylon relay fallback to dashboard status endpoint

2026-03-23 16:50:24 -07:00

routes

fix: cross-subdomain SSO auto-login for *arr services

2026-05-23 16:15:56 -07:00

scripts

fix(updates): route frontend deploy through host-side updater

2026-05-17 01:29:07 -07:00

src

fix: cross-subdomain SSO auto-login for *arr services

2026-05-23 16:15:56 -07:00

.dockerignore

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.eslintignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.eslintrc.js

Add dashboard version button and self-update UI wiring

2026-05-05 17:52:05 -07:00

.gitignore

test: build comprehensive test suite reaching 80%+ coverage threshold

2026-04-06 21:36:46 -07:00

.license-counter

fix: service edit, CSRF token stability, and license restore (v1.1.1)

2026-03-23 13:39:05 -07:00

.license-secret

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.prettierignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.prettierrc

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

app-templates.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

audit-logger.js

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

auth-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

backup-manager.js

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

cache-config.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

comprehensive-test.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

config-schema.js

fix: resolve ctx naming conflict in arr/config.js, add pylon to known config keys

2026-03-30 03:23:59 -07:00

constants.js

fix: increase general rate limit from 100 to 1000 per 15min

2026-03-31 23:26:30 -07:00

credential-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

crypto-utils.js

fix: prevent encryption key conflicts and add license backup

2026-03-23 14:17:25 -07:00

csrf-protection.js

fix: cross-subdomain SSO auto-login for *arr services

2026-05-23 16:15:56 -07:00

docker-maintenance.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

docker-security.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

Dockerfile

fix(updater): stop false-positive "update available" loop when commit is unknown

2026-05-12 18:20:59 -07:00

error-handler.js

Unified error handling system

2026-03-29 18:46:02 -07:00

error-logger.js

refactor: Phase 2 - add error handling modules and response helpers

2026-03-28 19:01:24 -07:00

errors.js

Unified error handling system

2026-03-29 18:46:02 -07:00

fs-helpers.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

health-checker.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

input-validator.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

jest.config.js

fix(test): remove stale jest setupFilesAfterEnv entry

2026-05-04 16:36:09 -07:00

keychain-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-keygen.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-manager.js

fix: prevent encryption key conflicts and add license backup

2026-03-23 14:17:25 -07:00

log-digest.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

metrics.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

middleware.js

fix: cross-subdomain SSO auto-login for *arr services

2026-05-23 16:15:56 -07:00

openapi.yaml

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

package-lock.json

feat: add 7 new features — exec shell, SSE events, compose import, docker resources, resource limits, email notifications, auto-updates

2026-04-05 16:15:14 -07:00

package.json

chore(release): bump to 1.5.0

2026-05-17 11:39:13 -07:00

pagination.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

platform-paths.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

port-lock-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

recipe-templates.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

resource-monitor.js

feat: cloud backup destinations + long-term resource history

2026-05-06 19:14:38 -07:00

response-helpers.js

fix: spread response data instead of nesting under 'data' key

2026-04-01 02:00:05 -07:00

self-updater.js

fix(updates): route frontend deploy through host-side updater

2026-05-17 01:29:07 -07:00

server.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

startup-validator.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

state-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

test-security-fixes.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

update-manager.js

feat: add 7 new features — exec shell, SSE events, compose import, docker resources, resource limits, email notifications, auto-updates

2026-04-05 16:15:14 -07:00

url-resolver.js

Unify URL resolution, add health checker sync, and make modules optional

2026-03-14 23:01:20 -07:00

VERSION

fix(updater): stop false-positive "update available" loop when commit is unknown

2026-05-12 18:20:59 -07:00