rack-planner

Files

jason 69b7262535 Fix 401 Unauthorized on all API calls after login (HTTP installs)

Root cause: cookie was set with Secure=true whenever NODE_ENV=production.
Browsers refuse to send Secure cookies over plain HTTP, so the session
cookie was dropped on every request after login — causing every protected
endpoint to return 401.

Fix: replace the NODE_ENV check with an explicit COOKIE_SECURE env var
(default false). Set COOKIE_SECURE=true only when running behind an HTTPS
reverse proxy. Direct HTTP installs (standard Unraid setup) work as-is.

Also updated UNRAID.md to document COOKIE_SECURE with a warning explaining
why it must stay false for plain-HTTP access.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-21 22:40:08 -05:00

auth.ts

Fix 401 Unauthorized on all API calls after login (HTTP installs)

2026-03-21 22:40:08 -05:00

edges.ts

Initial scaffold: full-stack RackMapper application

2026-03-21 21:48:56 -05:00

modules.ts

Switch auth to plain-text password env var (remove bcrypt)

2026-03-21 22:05:42 -05:00

nodes.ts

Initial scaffold: full-stack RackMapper application