curo1305andClaude Sonnet 4.6 c38c6b1c01 feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03 ...

- revoke_all_refresh_tokens: add skip_token_hash optional param (exclude
  current session while revoking others)
- change_password, enable_totp, disable_totp: call revoke with skip hash
  derived from refresh cookie; return sessions_revoked in response and
  write to audit log metadata_
- 3 new tests: test_{change_password,enable_totp,disable_totp}_revokes_other_sessions
  — all PASSED; 373 total passing, 0 regressions
- Frontend toasts: SettingsAccountTab + TotpEnrollment show
  "Other sessions have been terminated." when sessions_revoked > 0
- Companion fixes: rate_limiting get_client_ip refactor, deps/auth.py
  request.state.current_user, locustfile refresh-token task removal
- Version bump: 0.1.0 → 0.1.1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-05 12:47:16 +02:00

..

ai

fix(celery+lmstudio): PYTHONPATH for forked workers + qwen3.5-9b thinking model support

2026-06-05 00:00:26 +02:00

api

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

db

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

deps

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

load_tests

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

migrations

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

services

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

storage

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

tasks

feat(07-04): Celery retry harness + _ClassificationError sentinel (D-09/D-10)

2026-06-04 23:08:16 +02:00

tests

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

alembic.ini

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

celery_app.py

fix(07): replace autodiscover_tasks with explicit imports — tasks/document_tasks not at tasks.tasks path

2026-06-04 23:35:15 +02:00

config.py

feat(06-02): wire CorrelationIDMiddleware + config fields + promote 5 test stubs

2026-06-03 18:47:49 +02:00

Dockerfile

fix(06-06): patch OpenSSL CVE-2026-31789 — add apt-get upgrade to runtime Dockerfile stage

2026-06-04 19:13:05 +02:00

main.py

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

pytest.ini

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

requirements-dev.txt

feat(06-03): add backend/requirements-dev.txt with locust pin (D-04)

2026-06-03 18:47:43 +02:00

requirements.txt

feat(07-02): singleton OpenAIProvider + GenericOpenAIProvider + MAX_AI_CHARS removal

2026-06-04 18:58:19 +02:00