refactor(phase-2): proper auth system rework via feature branch #7

Closed
LordSchmackes wants to merge 3 commits from feature/phase-2-auth-firebase into main
3 Commits
Author SHA1 Message Date
smacks 70392c4665 docs: update brain.md with Phase 2 architecture details and git recovery pattern 2026-05-22 08:24:21 +02:00
smacks e4e5fd3c0e docs: update Phase 2 in TODO.md to reflect rework via feature branch 2026-05-22 08:23:11 +02:00
smacks 01a6d0f00a refactor(phase-2): extract auth CSS to stylesheet, harden session API, fix Firebase v10 error codes
- Move 374-line inline style block from login.php into assets/style.css (Phase 2 section)
- Add auth-page, auth-card, auth-tabs, auth-form, profile-shell and related
  classes to the main stylesheet as the single source of truth for all styles
- Fix Firebase v10 compat SDK error code: auth/invalid-credential now handled
  alongside legacy auth/wrong-password and auth/user-not-found codes
- Harden api/session.php: add Content-Type JSON header, email format validation,
  and a full security documentation comment explaining the token trust model
- Add FOUC comment to partials/head.php clarifying dark-only design intent
2026-05-22 08:22:54 +02:00