nagayon-935 / conduit / 23791787239

64%

push

github

fix: wire LocalForward frontend chain and move token to Cookie

Security: session token removed from forward URL.
Previously: /api/forward/{token}/host/port/path
Now:        /api/forward/host/port/path
Token is sent via Cookie 'conduit_forward_token' (path=/api/forward/,
SameSite=Strict) set by the Terminal click handler before opening
the new tab.

Frontend wiring (was entirely missing):
- App.tsx: SessionTab gains localForwards/forwardBaseUrl fields;
  handleConnect accepts and stores them; renderPane passes to Terminal
- ConnectForm: loads profile localForwards on profile select;
  passes to buildConnectRequest and onConnect
- NewConnectionOverlay: same localForwards wiring
- Terminal: forward link buttons set Cookie then window.open();
  disabled (greyed) when session disconnected

Backend:
- forward.go: parse token from Cookie not URL; 401 if absent
- connect.go: ForwardBaseURL simplified to '/api/forward'
- forward_test.go: updated URLs and Cookie headers

12 of 17 new or added lines in 2 files covered. (70.59%)

731 of 1219 relevant lines covered (59.97%)

7.05 hits per line