Business-Management

Files

T

curo1305 0af5e8cc24 Harden JWT: 8-hour expiry, add JWT vulnerability checks

- Reduce ACCESS_TOKEN_EXPIRE_MINUTES from 24h to 8h (no permanent sessions)
- Add JWT_PATTERNS to security_check.py: algorithm=none, verify_exp=False,
  multi-day timedelta, oversized EXPIRE_MINUTES, hardcoded secret
- Add JWT security checklist to security-auditor agent
- Document auth/session security items in TODO.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-13 22:54:53 +02:00

core

Harden JWT: 8-hour expiry, add JWT vulnerability checks

2026-04-13 22:54:53 +02:00

models

Add profile feature, input sanitization, and stronger security checks

2026-04-13 18:15:47 +02:00

routers

Add admin user management with role-gated access

2026-04-13 18:40:05 +02:00

schemas

Add admin user management with role-gated access