fix: audit round 2 — session cookie Secure kondisional, logout clear cookie, IDOR report owner-scoping (migrasi 0008), health force login-gate, SSE stream login-gate, FE: Gate undefined-flicker, auth-expired global redirect, X-User-Key demo dihapus, error handling alerts/routines/watchlist, chart label, encodeURIComponent, Screener onMount

2026-09-15 23:19:56 +07:00
parent 96be4d0922
commit 07ece10474
24 changed files with 160 additions and 91 deletions
@@ -3,10 +3,10 @@ package api
 import (
 	"bytes"
 	"encoding/json"
-	"time"
 	"net/http"
 	"net/http/httptest"
 	"testing"
+	"time"
 )

 // Gated routes 401 without session; public routes stay 200.