fix(customer): restore storefront login and session auth - #321

Merged

biz87 merged 12 commits into

betafrom

fix/285-customer-auth

Aug 1, 2026

Commits on Jul 29, 2026

fix(customer): restore storefront login and session auth (#285)
Ibochkarev
committed
fix(customer): harden session restore after storefront login
Ibochkarev
committed
fix(customer): unify logout so cookie restore cannot re-auth
Ibochkarev
committed
fix(customer): close auth silent-failure review findings
Ibochkarev
committed
refactor(customer): single API token persist and email normalize path
Ibochkarev
committed
fix(customer): clarify login failures and cover session sticky policy
Ibochkarev
committed
fix(customer): rotate API token on login to stop session fixation
Ibochkarev
committed
fix(customer): address post-rotation auth review findings
Ibochkarev
committed
fix(customer): add web API logout route for storefront auth
Ibochkarev
committed
fix(customer): complete resolveOrCreateToken mint step after rebase
Ibochkarev
committed
fix(ci): restore TokenService session helpers for PHPStan
Ibochkarev
committed
Merge remote-tracking branch 'origin/beta' into review-321
biz87
committed