Thomas Reitz 1643db0e7b fix: set refresh token (not access token) in HttpOnly cookie ... The login endpoint was incorrectly storing the access token in the refresh_token cookie. This caused silent refresh to fail after page reload since the short-lived access token couldn't be used for refresh. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-08 20:49:41 +01:00
..
core-service	fix: set refresh token (not access token) in HttpOnly cookie	2026-03-08 20:49:41 +01:00
frontend	feat: add user profile page with 2FA management and password change	2026-03-08 20:24:44 +01:00