Console:
- Rewrite auth from JWT decoding to Better Auth useSession()
- Add auth-client.ts with createAuthClient
- Remove elydora_token localStorage, dead auth API functions
- Fix login/register pages to use signIn.email/signUp.email
Server:
- Upgrade better-auth ^1.2.0 → ^1.5.5
- CORS: enforce allowlist on all environments
- Sync auth service and middleware with backend
SDKs:
- Deprecate login/register in Node, Python, Go SDKs
- Update READMEs to show direct token initialization
Config:
- Sanitize .env with dev-only placeholder values
- Update helm chart and install scripts
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Create scripts/install.sh that auto-generates Ed25519 signing key,
JWT secret, Postgres and MinIO passwords from .env.example placeholders
- Add startup validation in server to reject placeholder secrets
- Add 401 interceptor in console API client to clear stale JWT tokens
- Update README Quick Start to use ./scripts/install.sh
- Update .env.example with GENERATE_ME placeholders for all secrets
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
ZacharyZhang-NYandClaude Opus 4.6