kitchen/backend
jtricerolph 742bc91b3b Fix PDF viewing: cookie auth fallback + .mjs MIME type
- /file and /pdf endpoints: make token optional, fall back to hnf_session
  cookie auth when no valid JWT token provided. Kitchen frontend passes the
  literal '__session__' compat shim so token-only auth always 401'd.
- Add Request injection so cookie-based fallback path can read hnf_session.
- nginx: add types block mapping .mjs → text/javascript so pdf.worker.min.mjs
  passes browser strict MIME check for ES module scripts.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-12 21:34:51 +00:00
..
api Fix PDF viewing: cookie auth fallback + .mjs MIME type 2026-07-12 21:34:51 +00:00
migrations Fix migration transaction poisoning: ADD COLUMN IF NOT EXISTS 2026-07-12 19:53:26 +00:00
models Add .gitignore, remove __pycache__ from tracking 2026-07-12 12:16:04 +00:00
ocr Add .gitignore, remove __pycache__ from tracking 2026-07-12 12:16:04 +00:00
services Add .gitignore, remove __pycache__ from tracking 2026-07-12 12:16:04 +00:00
auth.py Add get_current_user_from_token to auth.py; fix missing import in 3 api files 2026-07-12 12:34:01 +00:00
database.py Initial kitchen scaffold — Phase 1 kitchen port (build-verified 2026-07-11) 2026-07-12 12:15:39 +00:00
Dockerfile Initial kitchen scaffold — Phase 1 kitchen port (build-verified 2026-07-11) 2026-07-12 12:15:39 +00:00
main.py Fix 413 upload limit + add /api/kds/settings to kitchen backend 2026-07-12 17:47:28 +00:00
requirements.txt Initial kitchen scaffold — Phase 1 kitchen port (build-verified 2026-07-11) 2026-07-12 12:15:39 +00:00
scheduler.py Initial kitchen scaffold — Phase 1 kitchen port (build-verified 2026-07-11) 2026-07-12 12:15:39 +00:00