Revert "fix: set *** cookie domain to .kamocrm.com for cross-subdomain sharing"
This reverts commit ****************
Fix background scrolling issue on home page
- Made main container background transparent to prevent white background from covering fixed background image - Changed background image from fixed attachment t...
Fix kubeconfig update to use WireGuard VPN IPs (10.8.x.x) instead of old Tailscale IPs
Upgrade to patched Next.js 15.5.7 and React 19.2.0 to fix exploit
Add logging for rememberMe value and type conversion
- Add type conversion for rememberMe to handle string/boolean/number - Add detailed logging to trace cookie setting logic - Log rememberMe value and type to deb...
Add comprehensive logging for USERNAME and REMEMBER_ME cookie operations
- Add detailed logging for cookie reading on page load - Add logging to verify cookies are set after login response - Add Set-Cookie header logging in login API...
Update hidden username field to use formKey for remount
- Add key to hidden username input to force remount after logout - Ensures all username-related fields are completely fresh after logout
Force form remount after logout to prevent browser autofill
- Add formKey state that changes after logout to force component remount - Change TextField key to include formKey - Change motion.div key to include formKey - ...
Use randomized field names to prevent browser autofill recognition
- Generate random suffix for username field names on each page load - Prevents browser from recognizing field as same one across page loads - Combined with auto...
Prevent browser autofill from restoring old username after logout
- Change autocomplete from 'username' to 'off' on username field - Change form autocomplete from 'on' to 'off' - Clear username and password state when coming f...
Delete ALL cookies indiscriminately during logout
- Delete all cookies on kamo-login logout page (client-side) - Delete all cookies on kamo-login logout API (server-side) - Clear localStorage and sessionStorage...
Clear session data before deleting key in logout endpoint
- Set session data to empty JSON before deleting the key - Ensures session is unusable even if deletion fails or there's replication lag - Add error handling wi...
Add verification logging to confirm Redis session is deleted during logout
Clear existing *** cookies before setting new one during login
- Clear all possible *** cookie variations (base domain, hostname, no domain) - Prevents reusing old session cookies from previous logins - Ensures new login al...
Fix logout: call SecurityService logout endpoint to fully invalidate session
- Call SecurityService /api/security/logout to properly invalidate session on Java backend - This ensures session is deleted, CSRF tokens are removed, and sessi...
Fix logout flow: clear cookies but still attempt auto-login
- Remove skipAutoLogin logic (auto-login should always work) - Add clearCookies param to logout redirect - Login page clears cookies when clearCookies=true, the...
Fix logout issue: prevent auto-login after logout
- Add skipAutoLogin query parameter to logout redirect - Skip auto-login check when skipAutoLogin=true is present - Enhanced cookie clearing on logout (multiple...
Revert "feat: Disable login form after successful authentication to prevent duplicate submissions"
This reverts commit ****************
Increase ROFL visibility with higher opacity, background, and console logging for troubleshooting
Add playful shake animation and light red background to password field on error
- Add passwordError state to track incorrect login attempts - Implement smooth shake animation with horizontal movement and rotation - Transition background col...
Fix SSR build error and modernize logout page design
- Fix 'window is not defined' error during build by adding mounted state - Enhance logo container with 3D rotation and glassmorphism effects - Upgrade typograph...
Modernize logout page with rich interactive design - Dynamic theme-based backgrounds and logos - Animated transitions with framer-motion - Material-UI styling with gradient effects - Floating particle effects - Success/error states with animated icons - Responsive design with mobile support
CRITICAL FIX: Remove endpoints that were consuming OTK prematurely
Root Cause Found: - /api/validate and /api/validate-otk in kamo-login were calling SecurityService - This consumed the OTK IMMEDIATELY after login (before user ...
Fix ESLint error: Use checkingExistingSession state
Fix: - Show loading spinner while checking for existing *** session - Hide login form during auto-login check - Provides better UX (user sees 'Checking session....
Add missing Redis library for auto-login and logout endpoints
Fix Build Error: - Create app/lib/redis.ts with read/write Redis client helpers - Provides getRedisReadClient() and getRedisWriteClient() - Required by /api/aut...
Implement SSO auto-login and complete logout flow
Auto-Login Feature: - Check for existing *** cookie on login page load - Validate session with Redis directly - If valid, create new OTK and auto-redirect to in...
Better error handling and logging for API responses - Parse both JSON and text responses with detailed logging
Fix login form encoding from JSON to x-www-form-urlencoded to match SecurityService endpoint
Complete strict TypeScript compliance: added helper functions for type-safe provider processing
Final fix: Replace any types with unknown for strict TypeScript compliance
Remove AuthorizationService dependencies, switch to SecurityService
- Remove complex AuthorizationService authentication logic and domain redirects - Replace OAuth2 provider detection with SecurityService API call - Keep OAuth2 ...
Fix Redis connection and update CI/CD workflow
- Update workflow to use existing k8s manifests instead of inline generation - Fix Redis hostname fallback from 'redis' to **************** - Convert ConfigMap ...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.