Marc-André Bombeck c1eb618dcc Add invite universal-link landing for app deep-link ...

Encode the admin invite QR as a clean /invite/<hlv_token> universal-link
that the iOS app intercepts via the AASA wildcard matcher. Add the
matching web route as a thin, shape-validated redirect onto the existing
register flow, and open the path on the public allowlist so an
unauthenticated scanner reaches it. A malformed token segment is
indistinguishable from no invite — no database hit, no enumeration
oracle. The token is never logged.

2026-06-14 19:32:19 +02:00

..

__tests__

Add invite universal-link landing for app deep-link

2026-06-14 19:32:19 +02:00

argon2-params.mjs

feat(insights): cycle ring replaces strain tile, tidy overview spacing, nav order, password-reset CLI

2026-06-06 21:31:12 +02:00

audit.ts

chore(release): v1.4.27

2026-05-15 22:59:10 +02:00

hmac.ts

chore(ci): pin the supply chain and surface build provenance

2026-06-10 15:05:05 +02:00

invite-token.ts

Add invite universal-link landing for app deep-link

2026-06-14 19:32:19 +02:00

issue-token.ts

feat(auth): optional Bearer token issuance on login for headless clients

2026-05-03 21:53:07 +02:00

native-client.ts

fix(auth): revoke bearer on logout, gate refresh-token issuance, widen device-mismatch revoke

2026-06-05 03:01:36 +02:00

passkey.ts

fix(auth): require user verification on every passkey ceremony

2026-05-27 07:39:51 +02:00

password.ts

feat(insights): cycle ring replaces strain tile, tidy overview spacing, nav order, password-reset CLI

2026-06-06 21:31:12 +02:00

profile-update.ts

fix(medications): every intake path converges on the slot, and caches cannot resurrect a pre-write body

2026-06-12 10:43:32 +02:00

refresh-token.ts

fix(auth): revoke bearer on logout, gate refresh-token issuance, widen device-mismatch revoke

2026-06-05 03:01:36 +02:00

secure-cookie.ts

fix(auth): self-hoster opt-out for session-cookie Secure flag (v1.5.1)

2026-05-26 19:16:44 +02:00

session.ts

fix(auth): self-hoster opt-out for session-cookie Secure flag (v1.5.1)

2026-05-26 19:16:44 +02:00