curo1305 1420180be7 feat(07.4-02): add fgp validation block to get_current_user in deps/auth.py ...

- Add `import hmac` to deps/auth.py imports block
- Insert fgp check after user_nbf block: extract fgp_claim from payload,
  skip if empty (migration grace for pre-7.4 tokens, D-06), recompute
  fgp_actual via auth_service._compute_fgp, compare with hmac.compare_digest
- Mismatch raises HTTP 401 "Token fingerprint mismatch" (D-03)
- Block placed outside try/except (pure computation, no I/O, no fail-open)

2026-06-06 21:55:13 +02:00

..

__init__.py

feat(01-03): add full v1 ORM schema, async session factory, and DB dependency

2026-05-22 09:16:21 +02:00

auth.py

feat(07.4-02): add fgp validation block to get_current_user in deps/auth.py

2026-06-06 21:55:13 +02:00

db.py

feat(01-03): add full v1 ORM schema, async session factory, and DB dependency

2026-05-22 09:16:21 +02:00

utils.py

fix(06): WR-04 add 10.0.0.0/8 to trusted proxy CIDR list

2026-06-04 23:15:48 +02:00