r-zakarya b023eab1f4 fix(http): return 401 (not 500) on expired/rejected session ...

Authenticate/RequireCSRF write a 401 then raise ESessionRejected; when it
reached the dispatcher catch-all, the generic `on E: Exception` overwrote it
with a 500. Added `on ESessionRejected do Exit` before the generic clause in
both dispatchers (GET + Other) — one place, covers every handler whether or
not it wraps Authenticate. Root cause, not per-handler patch.

ponytail: runtime check only (expired token → 401) — no Delphi unit harness.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-09 21:42:08 +01:00

css

style: define missing --bg-elev-3 / --accent-fg CSS variables

2026-07-03 18:01:57 +01:00

delphi-backend

fix(http): return 401 (not 500) on expired/rejected session

2026-07-09 21:42:08 +01:00

js

refactor(db): drop cleartext site/username column refs (columns removed)

2026-07-09 21:25:35 +01:00

.gitattributes

feat: secure notes + password history + custom fields + quick-win bundle

2026-06-14 20:17:19 +01:00

.gitignore

refactor(js): extract TOTP module + add RFC 6238 tests (§3.1)

2026-07-05 16:35:29 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(crypto): encrypt site/title/tags at rest too (CODE_AUDIT §1.3)

2026-07-09 11:25:13 +01:00

CODE_AUDIT.md

fix(http): return 401 (not 500) on expired/rejected session

2026-07-09 21:42:08 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index-legacy.html

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

refactor(js): extract quick-search overlay cluster from app.js (§3.1)

2026-07-08 18:43:55 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%