2 Commits

Include renames

Author	SHA1	Message	Date
curo1305	fac0e781f9	test(07.3-01): extend test_settings_has_jwt_config — red until Plan 02 ... - Assert settings.refresh_token_expire_hours == 16 (CFG-01 / D-09) - Assert hasattr(settings, "jwt_private_key") (CFG-01 / D-01) - Assert hasattr(settings, "jwt_public_key") (CFG-01 / D-01) - Existing refresh_token_expire_days == 30 assertion preserved (Pitfall 5) - Test intentionally fails until Plan 02 adds the three new config fields	2026-06-06 16:50:32 +02:00
curo1305	12c6487855	feat(02-01): add BackupCode ORM model, password_must_change field, Alembic migration, extend Settings ... - Add BackupCode model to db/models.py with user_id FK, code_hash (Argon2), used_at (nullable) - Add ix_backup_codes_user_id index on backup_codes.user_id - Add password_must_change BOOLEAN NOT NULL DEFAULT false to User model (ADMIN-01) - Extend config.py Settings with JWT, SMTP, admin bootstrap, and CORS fields (D-01, D-04, D-09) - Add env_list_separator=',' for cors_origins env var parsing - Append PyJWT, pwdlib[argon2], pyotp, aioredis, slowapi to requirements.txt - Add .env.example entries for SECRET_KEY, ADMIN_EMAIL, SMTP_*, CORS_ORIGINS - Create migration 0002 adding backup_codes table and password_must_change column - Add TDD tests for all Task 1 acceptance criteria (7 tests pass)	2026-05-22 19:19:52 +02:00