cartsnitch/receiptwitness

T

CartSnitch Engineer Bot 2f37f0501f fix(api): parse signed session cookie instead of SHA-256 hashing

Better-Auth v1.5.6 stores raw tokens in sessions.token, not SHA-256
hashes. The session cookie is signed (rawToken.hmacSignature), so
strip the HMAC signature suffix before querying the DB.

Fixes 401 errors on all data endpoints caused by the incorrect hash.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-01 11:09:29 +00:00

.github/workflows

fix(ci): add --disable-gpu and --disable-dev-shm-usage to Lighthouse Chrome flags

2026-03-31 21:07:44 +00:00

fix(api): parse signed session cookie instead of SHA-256 hashing

2026-04-01 11:09:29 +00:00

fix(auth): add session table model mapping for plural table name

2026-03-31 03:42:26 +00:00

fix(deploy): include alembic in API Docker image

2026-03-30 20:13:56 +00:00

content/marketing

Add shrinkflation consumer FAQ for April 1 series launch

2026-03-28 14:54:32 +00:00

docs: add UAT runbook v1

2026-03-30 20:20:07 +00:00

fix(e2e): correct smoke test heading assertion to match Login page

2026-03-31 18:15:07 +00:00

feat(ci): add Lighthouse CI performance checks (#85 )

2026-03-31 15:45:22 +00:00

chore: remove polyrepo CI workflow leftovers (#72 )

2026-03-30 21:54:17 +00:00

fix(frontend): align API route paths with backend (alerts, price-history)

2026-04-01 02:10:12 +00:00

.dockerignore

feat: add multi-stage Dockerfile for PWA

2026-03-18 13:26:57 +00:00

.gitignore

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

CLAUDE.md

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

Dockerfile

fix: add explicit USER 101 to prod stage Dockerfile

2026-03-22 16:06:00 +00:00

eslint.config.js

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

index.html

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

lighthouserc.json

fix(ci): disable FullPageScreenshot gatherer to prevent Chrome crash

2026-03-31 21:58:30 +00:00

nginx.conf

fix: update nginx listen port to 8080 for non-root operation

2026-03-22 01:27:31 +00:00

package-lock.json

Merge remote-tracking branch 'origin/main' into feat/e2e-journey-tests

2026-03-31 17:49:40 +00:00

package.json

Merge remote-tracking branch 'origin/main' into feat/e2e-journey-tests

2026-03-31 17:49:40 +00:00

playwright.config.ts

feat(e2e): add J1 and J8 journey tests

2026-03-31 16:49:36 +00:00

README.md

test

2026-03-30 00:50:51 +00:00

renovate.json

feat: add Renovate dependency update config

2026-03-18 18:21:31 +00:00

tsconfig.app.json

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

tsconfig.json

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

tsconfig.node.json

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

vite.config.ts

feat: add core PWA screens (auth, dashboard, purchases, products, alerts, settings)

2026-03-17 12:24:31 +00:00

vitest.config.ts

fix(ci): exclude e2e tests from vitest

2026-03-30 19:49:23 +00:00

README.md

CartSnitch