2 Commits

Include renames

Author	SHA1	Message	Date
jakeandClaude Opus 4.6	fb785645f8	Add optional OIDC authentication via Better Auth genericOAuth plugin ... Support self-hosted OIDC providers (Authentik, Authelia, Keycloak, etc.) configured entirely via environment variables. Uses Better Auth's hooks.before to gate email/password sign-up at the endpoint level, and disables emailAndPassword entirely when DISABLE_PASSWORD_LOGIN is set. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-03 13:39:15 -05:00
jake	f94ceaf233	Move auth protection to middleware and server layout ... Replace client-side session checks (useSession + router.replace) with a two-layer server-side approach: Next.js middleware performs a fast cookie presence check for all protected routes, and the (pages) layout does a full server-side session validation before rendering. Move login/register into a dedicated (auth) route group with its own minimal layout so they sit outside the authenticated shell. Lift the Toaster to the root layout so it remains available across all route groups.	2026-03-02 14:38:54 -05:00