mirror of
https://github.com/maybe-finance/maybe.git
synced 2025-07-19 05:09:38 +02:00
9336719242
- Replace API keys with OAuth2 tokens for mobile apps - Add device tracking and management for mobile sessions - Implement 30-day token expiration with refresh tokens - Add MFA/2FA support for mobile login - Create dedicated auth endpoints (signup/login/refresh) - Skip CSRF protection for API endpoints - Return plaintext tokens (not hashed) in responses - Track devices with unique IDs and metadata - Enable seamless native mobile experience without OAuth redirects This provides enterprise-grade security for the iOS/Android apps while maintaining a completely native authentication flow. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| channels/application_cable | ||
| components/previews | ||
| controllers | ||
| fixtures | ||
| helpers | ||
| integration | ||
| interfaces | ||
| jobs | ||
| lib | ||
| mailers | ||
| models | ||
| services | ||
| support | ||
| system | ||
| vcr_cassettes | ||
| application_system_test_case.rb | ||
| i18n_test.rb | ||
| test_helper.rb | ||