feat(auth): extract user info from JWT, skip core-api sync

- Decode JWT claims (name, email, groups) directly in Flutter - No longer calls /auth/sync endpoint (avoids CORS preflight issues) - Bearer token used for subsequent API authentication 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 13:38:19 +01:00
parent 346ca75d68
commit b35f495537
3 changed files with 59 additions and 25 deletions
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

 ## [Unreleased]

+## [1.0.11] - 2026-01-04
+
+### Changed
+- Web auth now extracts user info directly from JWT instead of syncing with core-api
+  - Eliminates CORS preflight issues with /auth/sync endpoint
+  - Decodes JWT claims (name, email, groups) client-side
+  - Bearer token will be used for API authentication
+
 ## [1.0.10] - 2026-01-04

 ### Fixed