kevinveenbirkenbachandClaude Opus 5.5 10e0938fce fix(web-app-mastodon): stop API responses from rewriting the session cookie ...

Every API response re-encrypted and resent the cookie session it read. Over Tor the landing page's trends and custom_emojis calls finish after the one-click SSO POST, overwrite omniauth.state and fail the OIDC callback with csrf_detected (CI Fediwall#0 onion pass). An initializer marks every Api::BaseController request session_options[:skip], mounted on the mastodon service in every mode.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 20:08:42 +01:00

..

web-app-mastodon/files

fix(web-app-mastodon): stop API responses from rewriting the session cookie

2026-10-31 20:08:42 +01:00

web-app-openproject/files

Merge branch 'feature/updater' into feature/store-i18n

2026-10-23 17:32:32 +02:00