Jakob Wennberg 31dec292fe fix: CSP blocking hydration and Enable Banking widget, stale auth cleanup ...

- Add 'unsafe-inline' to script-src so Next.js hydration scripts run
- Whitelist *.enablebanking.com in CSP (script, style, connect, img)
- Allow HTTPS images broadly for third-party bank logos
- Clear stale refresh tokens in middleware (skip on /auth callback)
- Fix login button disabled on browser autofill by reading email from form DOM

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-02 19:12:33 +01:00

..

client.ts

Initial copy from influencer-biz

2026-02-13 14:00:46 +01:00

fetch-all.ts

feat: per-line VAT, invoice document types, ledger-based VAT declaration, bank reconciliation, and pagination

2026-02-21 14:57:15 +01:00

middleware.ts

fix: CSP blocking hydration and Enable Banking widget, stale auth cleanup

2026-03-02 19:12:33 +01:00

server.ts

Initial copy from influencer-biz

2026-02-13 14:00:46 +01:00