BetterFrame/server
Mitchell R bacf1d2fcb
fix: use deterministic HKDF key for cookie signing
cookieMac was using encryptString which generates a random IV per
call, making the HMAC key non-deterministic. Cookie signed at login
could never verify on subsequent requests. Now uses deriveKey(info)
which uses HKDF — deterministic for same server key.
2026-05-10 02:59:04 +02:00
..
src fix: use deterministic HKDF key for cookie signing 2026-05-10 02:59:04 +02:00
.gitignore build fixes for bsb 2026-05-10 01:46:11 +02:00
bsb-tests.json build fixes for bsb 2026-05-10 01:46:11 +02:00
package.json build fixes for bsb 2026-05-10 01:46:11 +02:00
tsconfig.json adding initial project 2026-05-10 01:09:13 +02:00