P2 — web SPA data layer + same-origin auth #1144

Merged

shaggy merged 5 commits from feat/webui-p2-data-auth into next

2026-08-10 01:52:02 +00:00

Author	SHA1	Message	Date
shaggy (mosaic-dev box)	90cf286a09	fix(web): reject protocol-relative auth callbacks ci/woodpecker/pr/ci Pipeline was successful Details	2026-08-09 20:43:27 -05:00
shaggy (mosaic-dev box)	0aef432052	docs(scratchpad): record P2 remediation evidence	2026-08-09 20:21:53 -05:00
shaggy (mosaic-dev box)	e16c08aa9f	test(web): align jsdom abort signals with Node	2026-08-09 20:20:30 -05:00
shaggy (mosaic-dev box)	a4861c221f	docs(scratchpad): record WebUI P2 verification	2026-08-09 20:02:22 -05:00
shaggy (mosaic-dev box)	46d68e1ff4	feat(web): add same-origin SPA authentication	2026-08-09 20:00:22 -05:00