diff options
| author | salmonik <salmonik@tuta.io> | 2026-11-08 03:37:19 +0100 |
|---|---|---|
| committer | salmonik <salmonik@tuta.io> | 2026-11-08 03:37:19 +0100 |
| commit | 7ebf8c7876b9540843d2635baf55ca4061267e40 (patch) | |
| tree | 3444f06cc3386285ae5d3b6e0f916b5ec7fd6f93 /docs | |
| parent | crash: show and verify the revealed seed in the TUI and GUI (diff) | |
| download | zagan-bet-7ebf8c7876b9540843d2635baf55ca4061267e40.tar.gz zagan-bet-7ebf8c7876b9540843d2635baf55ca4061267e40.zip | |
web: show the account number and stop reel spin on an error
Also documents the __Host- cookie prefix used on HTTPS.
Diffstat (limited to '')
| -rw-r--r-- | docs/WEB-PLAN.md | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/WEB-PLAN.md b/docs/WEB-PLAN.md index 895687b..80e797b 100644 --- a/docs/WEB-PLAN.md +++ b/docs/WEB-PLAN.md | |||
| @@ -61,8 +61,9 @@ Gateway → browser: | |||
| 61 | `roulette`, `blackjack`, `crash`). The browser renders each screen; it never | 61 | `roulette`, `blackjack`, `crash`). The browser renders each screen; it never |
| 62 | computes a result. | 62 | computes a result. |
| 63 | 63 | ||
| 64 | The cookie is `zagan_session`, HttpOnly, SameSite=Strict, Secure on HTTPS. It | 64 | The cookie is `__Host-zagan_session` on HTTPS (plain `zagan_session` for local |
| 65 | is set on the WebSocket handshake. It covers refresh and the grace window only; | 65 | HTTP testing), HttpOnly, SameSite=Strict, Secure on HTTPS. It is set on the |
| 66 | WebSocket handshake. It covers refresh and the grace window only; | ||
| 66 | there is no remember-me. | 67 | there is no remember-me. |
| 67 | 68 | ||
| 68 | ## Build and run | 69 | ## Build and run |