Julien Herr a0415cdc41 refactor: replace custom HMAC CSRF with hono/csrf middleware ...

Removes 38-line hand-rolled HMAC-SHA256 implementation in favour of
the built-in hono/csrf, which validates the Origin header natively.

- Delete src/utils/csrf.ts
- Replace custom CSRF middleware with hono/csrf (Origin-header check)
- Remove csrfToken from ContextVariableMap, layout(), forms, and JS fetch() calls
- Update admin tests: swap X-CSRF-Token for Origin header

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-22 10:28:26 +02:00

..

hono.d.ts

refactor: replace custom HMAC CSRF with hono/csrf middleware

2026-05-22 10:28:26 +02:00

index.ts

feat(websub): add WebSubSubscription type

2026-05-21 23:46:49 +02:00

mailparser.d.ts

chore: apply Prettier formatting to entire codebase

2026-05-20 22:01:53 +02:00

rss.d.ts

feat: add ESLint, lint-staged, and update pre-commit hook + CI

2026-05-21 09:49:20 +02:00