andrey 6bf50344fd fix: harden PIHTTPServerSessionAuth session table ...

- cleanupExpired() drops sessions expired by tokenTtl or sessionIdleTimeout and is
  called opportunistically on issuing a token, bounding the session table; it is
  protected and self-locking so subclasses can run it periodically
- issueToken() refuses a token already used by an active session instead of
  silently merging two sessions (login replies 500 on a generator collision)
- document that the token generator must be collision-resistant
- tests: SessionCleanupOnLogin, ManualCleanup, TokenCollisionRejected

2026-09-23 08:49:10 +03:00

..

microhttpd_server_p.cpp

Merge branch 'master' into http_auth

2026-09-06 13:54:25 +03:00

pihttpserver.cpp

refactor: rename __PIP_TYPENAME_DECLARE to PIP_REGISTER_TYPENAME, add PIP_DECLARE_TYPENAME macro

2026-08-24 19:31:41 +03:00

pihttpserverbasicauth.cpp

fix: accept case-insensitive Basic scheme and guard HTTP test target

2026-09-23 08:49:04 +03:00

pihttpserverbearerauth.cpp

fix: accept case-insensitive Bearer scheme in HTTP server

2026-09-22 23:33:10 +03:00

pihttpserverprotected.cpp

Add multi-user Basic auth support via AuthInfo

2026-09-05 22:51:50 +03:00

pihttpserversessionauth.cpp

fix: harden PIHTTPServerSessionAuth session table

2026-09-23 08:49:10 +03:00