Pouzor e14a9e87aa fix: stop exposing JWT in WebSocket URL query param ...

Token was visible in server logs, browser history, and proxy access logs.
Backend now accepts the connection first, then validates a JSON auth
message {"token": "<jwt>"} sent by the client on open before adding
the socket to the active connections pool.

2026-03-18 00:49:03 +01:00

..

routes

fix: stop exposing JWT in WebSocket URL query param

2026-03-18 00:49:03 +01:00

__init__.py

feat: Phase 1 scaffold — frontend canvas + backend skeleton

2026-03-06 23:14:34 +01:00

deps.py

feat: add MCP server with HTTP/SSE transport for AI integration

2026-03-13 16:41:34 +01:00