Claus Lohmar b4222077b1 fix(auth): judge the passkey nudge by the configured origin ... REVIEW-001 (M0) L7c: shouldNudge trusted the request Host, so a reverse proxy that rewrites Host wrongly suppressed (or enabled) the nudge. Prefer the configured server.base_url host (Deps.BaseURL) and fall back to the request Host only when it is unset. Wire the secure session-cookie name through SessionCookieNameFor so the `__Host-` prefix (L1s) is used consistently by the flows.		2026-10-14 11:29:58 +00:00
..
core	fix(auth): judge the passkey nudge by the configured origin	2026-10-14 11:29:58 +00:00
modules	feat(module): add the module registry, discovery and the home module (SPEC-008)	2026-10-14 10:53:57 +00:00