Add USERNAME and REMEMBER_ME cookies with domain-specific settings
- Set USERNAME cookie when remember me is checked on successful login (1 year expiration) - Clear USERNAME cookie when remember me is unchecked on any login att...
Update hidden username field to use formKey for remount
- Add key to hidden username input to force remount after logout - Ensures all username-related fields are completely fresh after logout
Force form remount after logout to prevent browser autofill
- Add formKey state that changes after logout to force component remount - Change TextField key to include formKey - Change motion.div key to include formKey - ...
Use randomized field names to prevent browser autofill recognition
- Generate random suffix for username field names on each page load - Prevents browser from recognizing field as same one across page loads - Combined with auto...
Prevent browser autofill from restoring old username after logout
- Change autocomplete from 'username' to 'off' on username field - Change form autocomplete from 'on' to 'off' - Clear username and password state when coming f...
Delete ALL cookies indiscriminately during logout
- Delete all cookies on kamo-login logout page (client-side) - Delete all cookies on kamo-login logout API (server-side) - Clear localStorage and sessionStorage...
Clear session data before deleting key in logout endpoint
- Set session data to empty JSON before deleting the key - Ensures session is unusable even if deletion fails or there's replication lag - Add error handling wi...
Add verification logging to confirm Redis session is deleted during logout
Clear existing *** cookies before setting new one during login
- Clear all possible *** cookie variations (base domain, hostname, no domain) - Prevents reusing old session cookies from previous logins - Ensures new login al...
Fix logout: call SecurityService logout endpoint to fully invalidate session
- Call SecurityService /api/security/logout to properly invalidate session on Java backend - This ensures session is deleted, CSRF tokens are removed, and sessi...
Fix logout flow: clear cookies but still attempt auto-login
- Remove skipAutoLogin logic (auto-login should always work) - Add clearCookies param to logout redirect - Login page clears cookies when clearCookies=true, the...
Fix logout issue: prevent auto-login after logout
- Add skipAutoLogin query parameter to logout redirect - Skip auto-login check when skipAutoLogin=true is present - Enhanced cookie clearing on logout (multiple...
Update CI/CD workflow to use bare hostnames and re-enable k2m1 deployment
Set *** cookie on login.* domain for auto-login
BREAKING: Enables auto-login when user has valid session Before: *** cookie only created on internal.* domain after OTK validation After: *** cookie created on...
Add domain-agnostic IngressRoute for automatic SSL and routing
- Added k8s/ingressroute.yaml with HostRegexp pattern for login subdomain - Updated CI/CD to deploy IngressRoute automatically - Enables Cloudflare-like automat...
Add floating orbs and apply modern gradients to recover page
Login Page Enhancements: - Added two floating orbs with independent animations - Orbs float vertically and horizontally with scale effects - Heavily blurred for...
Modernize Welcome Back section with polished gradients
- Replaced solid background with sophisticated 135deg gradient using primary colors - Added animated radial gradient overlay that pulses subtly (8s loop) - Adde...
Pass re*** build args in Forgejo workflow
- Added build-args to docker/build-push-action with re*** site key - NEXT_PUBLIC_* env vars now properly baked into JavaScript bundle - This enables re*** funct...
Add build args support for NEXT_PUBLIC environment variables
- Added ARG declarations for NEXT_PUBLIC_RE***_SITE_KEY and related vars - Converted ARGs to ENV vars for Next.js build process - Created BUILD_ARGS_REQUIRED.md...
Like what you see shipping?
Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.