4 Commits

Author SHA1 Message Date
Jannis Mattheis
ac7bb2a2a9 fix: typo user external 2026-04-19 19:20:25 +02:00
Jannis Mattheis
d432900486 fix: logout to /auth/logout and swagger docs
With session elevation, we cannot use DELETE /client as this requires
elevation. It should be possible to logout without an elevated session.

This makes the logout endpoint public api to be used by the android app.
2026-04-19 18:00:16 +02:00
Jannis Mattheis
57878e0574 fix: make secure cookie configurable 2026-04-11 18:53:48 +02:00
Jannis Mattheis
50d0572584 feat: implement /auth/local/{login,logout} 2026-04-11 18:53:48 +02:00