4 Commits

Include renames

Author	SHA1	Message	Date
Dan MilneandClaude Opus 4.6	2235924f37	Harden OIDC, add SVG sanitization, improve form UX and security defaults ... Remove PKCE plain method support (S256 only), enforce openid scope requirement, filter to supported scopes, strip reserved claims from custom claims as defense-in-depth, sanitize SVG icons with Loofah, add global input padding, switch session cookies to SameSite=Lax, use Session.active scope, and remove unsafe-eval from CSP. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-06 21:06:51 +10:00
Dan MilneandClaude Opus 4.6	3d98261a51	Add dark mode with toggle and localStorage persistence ... Uses Tailwind v4 class-based dark mode with a Stimulus controller for toggling. Respects prefers-color-scheme as default, prevents FOUC with an inline script, and persists the user's choice in localStorage. All views updated with dark: variants for backgrounds, text, borders, badges, buttons, and form inputs. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 00:37:58 +11:00
Dan MilneandClaude Opus 4.6	43958f50ce	Add @tailwindcss/forms plugin and improve application form UX ... Install @tailwindcss/forms to fix missing padding on form inputs across the app. Move the Application Type selector earlier in the new application form (after slug, before description) so it gates type-specific fields sooner. On the edit page, replace the confusing disabled dropdown with a read-only badge since the type can't be changed after creation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 00:36:37 +11:00
Dan Milne	1ff0a95392	First commit	2025-10-23 16:19:56 +11:00