2 Commits

Include renames

Author	SHA1	Message	Date
curo1305	fd3f611546	security(07.3-02): ES256 signing — swap 4 JWT sites + config keys + promote tests ... - backend/config.py: add refresh_token_expire_hours=16, jwt_private_key, jwt_public_key - backend/services/auth.py: add import base64; all 4 JWT sites use ES256 with inline PEM decode; zero HS256/secret_key references - backend/tests/test_auth_es256.py: promote ES256-01..03 + CFG-01 tests from xfail to passing	2026-06-06 16:59:38 +02:00
curo1305	5c1a1f9504	test(07.3-01): add Wave 0 xfail scaffold — 9 ES256/RM/CFG stubs ... - Create backend/tests/test_auth_es256.py with 9 xfail(strict=True) stubs - Cover ES256-01..05 (access token, HS256 rejection, reset token, startup rotation) - Cover RM-01..03 (16h default TTL, 30d remember_me TTL, cookie max_age) - Cover CFG-01 satellite (jwt_private_key/jwt_public_key presence) - Add es256_keys autouse fixture generating fresh P-256 keypair per test - All 9 stubs collect and run as XFAIL; zero XPASS, zero ERROR	2026-06-06 16:49:58 +02:00