2 commits

Author	SHA1	Message	Date
Adam Moussa	26f6f48de8	fix(api): document only the auth statuses the routes return	2026-09-25 17:03:05 -04:00
Adam Moussa	bbfa6e4a3c	feat(api): switch live auth to host cookie BFF ... Replace Bearer as the documented session path with Cognito hosted UI plus __Host-ap_* cookies so the SPA can call /api with credentials include.	2026-09-22 12:39:00 -04:00