feat: expose dashboard JSON API with Bearer-token auth for a separated frontend - #16

Closed

jack482653 wants to merge 11 commits into

sciwork:mainfrom

jack482653:worktree-frontend-api-extraction

Commits on Aug 15, 2026

feat: add frontend CORS/redirect/token-ttl settings

jack482653
and
claude
committed
b3295c3
feat: add stateless SPA API token issue/verify

jack482653
and
claude
committed
76ab00f
feat: accept Authorization Bearer tokens on API routes

jack482653
and
claude
committed
df9d37a
feat: add GET /dashboard/api/me for SPA session bootstrap

jack482653
and
claude
committed
61ca1fc
feat: add SPA OAuth login/callback that issues a Bearer token

jack482653
and
claude
committed
865947c
feat: add CORS support for the separated SPA frontend

jack482653
and
claude
committed
e27f0c6
chore: fix ruff format nits in test_config.py and test_auth.py

jack482653
and
claude
committed
f4488d7
docs: document SPA Bearer-token auth and new env vars

jack482653
and
claude
committed
6caee6b
fix: harden SPA auth against redirect loops, add BadData/case-insensitive Bearer handling

jack482653
and
claude
committed
0d0e1d2
docs: document SPA OAuth redirect URI, Bearer auth, and revocation/security notes

jack482653
and
claude
committed
6b70b7b
docs: avoid naming the argus-dashboard repo in docs

jack482653
and
claude
committed
f7424b1