pnoker a73ba1267a refactor(web,auth): httpOnly cookie auth + CSP + dedup + type debt ...

- token: httpOnly+Secure+SameSite cookie (backend Set/Clear + filter Cookie-first read), frontend axios drops X-Auth-Token, auth store uses sessionStorage flag, router guard checks flag
- security: CSP + nosniff + Referrer-Policy in index.html; delete dead getCookies/setCookies/removeCookies; remove Base64 obfuscation from storageUtil
- fix: 24 double-notification .catch failMessage removed (interceptor handles); storageUtil boolean get/set asymmetry fixed
- types: DeviceDetail/profile-detail/device-edit {} as any -> Partial<DeviceRecord>/DriverRecord/ProfileRecord
- dedup: API CRUD factory (11 modules), i18n confirmDelete interpolation (54 lines removed), CardShell unified + shared form-width mixin

Verification: vue-tsc green / 158 unit tests pass / mvn compile green

2026-08-08 18:40:58 +08:00

..

__snapshots__

Add 'dc3-web/' from commit '0c3c7a157c3f003d5d8a8077c3e3850069d19747'

2026-06-28 09:45:33 +08:00

api-contracts.test.ts

refactor(web,auth): httpOnly cookie auth + CSP + dedup + type debt

2026-08-08 18:40:58 +08:00