feat: add WebSocket server with ticket auth and heartbeat (#38)
feat: add WebSocket server with ticket auth and heartbeat (#38)
Review — APPROVE
Clean WebSocket implementation with proper security (ticket auth, origin validation, session revalidation, heartbeat).
- Ticket single-use + 30s TTL
- Origin…
feat: add WebSocket server with ticket auth and heartbeat (#38)
feat: implement REST API backend with full CRUD and sync (#37)
feat: implement REST API backend with full CRUD and sync (#37)
Review — APPROVE
Summary: Comprehensive REST API with 16 route files. Auth, BOLA, Zod validation, idempotency keys all correctly implemented.
Checklist:
- Every endpoint checks…
feat: implement REST API backend with full CRUD and sync (#37)
feat: integrate Logto auth with middleware and login page (#36)
feat: integrate Logto auth with middleware and login page (#36)
Review — APPROVE
Clean Logto integration matching la-compagnie-maximus pattern. Auth routes, middleware, and helper all look correct.
- No secrets committed
- Cookie security…