roof ac0c16c97b Fix session cookie name collision when running multiple PIC instances on localhost ...

Flask's default cookie name ('session') is shared across all ports on the same
hostname. When two PIC instances are accessed via localhost:portA and localhost:portB,
logging into one overwrites the other's session cookie, causing repeated logouts.

Derive a unique 8-hex suffix from each instance's persistent SECRET_KEY and set
SESSION_COOKIE_NAME = 'pic_sess_<suffix>'. This ensures each cell uses a distinct
cookie name, so sessions are fully isolated regardless of hostname.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-04 09:15:42 -04:00

..

config

fix: WireGuard routing, DNS, service access, and UI improvements

2026-04-20 12:43:23 -04:00

routes

feat: Phase 4 hardening — retry/backoff, loop detection, sync status UI + tests

2026-05-04 04:18:36 -04:00

.coverage

init

2025-09-12 23:04:52 +03:00

API_DOCUMENTATION.md

init

2025-09-12 23:04:52 +03:00

app.py

Fix session cookie name collision when running multiple PIC instances on localhost

2026-05-04 09:15:42 -04:00

auth_manager.py

feat: add authentication and authorization system

2026-04-25 15:00:06 -04:00

auth_routes.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

base_service_manager.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

calendar_manager.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

cell_cli.py

init

2025-09-12 23:04:52 +03:00

cell_link_manager.py

feat: Phase 4 hardening — retry/backoff, loop detection, sync status UI + tests

2026-05-04 04:18:36 -04:00

cell_manager.py

init

2025-09-12 23:04:52 +03:00

config_manager.py

A5: Extract all route groups into Flask blueprints (app.py -1735 lines)

2026-05-01 06:11:21 -04:00

config.py

init

2025-09-12 23:04:52 +03:00

container_manager.py

fix: silent autosave, pending dedup, domain/cell_name pending, containers access

2026-04-24 07:16:13 -04:00

Dockerfile

fix: full-tunnel default, real host routing table, peer config tunnel mode

2026-04-20 15:20:55 -04:00

email_manager.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

enhanced_cli.py

fix: all 214 tests passing (from 36 failures)

2026-04-19 16:43:07 -04:00

file_manager.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

firewall_manager.py

fix: UI always accessible; fix exit-relay AllowedIPs not updating

2026-05-02 05:41:22 -04:00

ip_utils.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

log_manager.py

fix: spurious health alerts, show rotated logs, clear history button

2026-04-21 03:05:04 -04:00

managers.py

fix(P2): peer add rollback, helper failure recovery, manager extraction (A2/A3/A5)

2026-05-01 05:27:39 -04:00

network_manager.py

feat: fix cross-cell service access — DNS DNAT, service DNAT, Caddy routing

2026-05-02 03:12:09 -04:00

peer_registry.py

feat: Phase 3 - per-peer internet routing via exit cell

2026-05-01 16:23:31 -04:00

port_registry.py

feat: port conflict validation, autosave on Apply, extended integration tests

2026-04-24 04:45:47 -04:00

requirements.txt

feat: add comprehensive E2E test suite (Playwright + WireGuard + API)

2026-04-25 16:41:13 -04:00

routing_manager.py

feat(cells): fix PIC-to-PIC connection + add service-sharing permissions

2026-05-01 08:35:24 -04:00

service_bus.py

fix for bus

2025-09-13 14:42:32 +03:00

test_enhanced_api.py

wip: make work Services Status

2025-09-13 14:23:31 +03:00

vault_manager.py

fix: full security audit remediation — P0/P1/P2/P3 fixes + 1020 passing tests

2026-04-27 11:30:21 -04:00

wireguard_manager.py

Fix ensure_postup_dnat to strip-and-replace all DNAT rules idempotently

2026-05-04 06:54:20 -04:00