curo1305 1882edfff6 feat(02-02): auth API endpoints + security hardening + Python 3.9 compat ...

- backend/api/auth.py: register, login (TOTP+backup), refresh, logout,
  me, change-password; per-account Redis rate limit; HIBP check
- backend/main.py: Origin validation middleware, CSP headers middleware,
  CORS locked to settings.cors_origins, Redis lifespan (app.state.redis),
  admin bootstrap, auth router included, slowapi SlowAPIMiddleware
- backend/services/email.py: already created in Plan 01 (verified exists)
- Python 3.9 compat: fixed match statement in ai/__init__.py,
  str|None union syntax in openai_provider.py, api/documents.py,
  api/topics.py, api/settings.py, services/classifier.py

All 17 tests in test_auth_api.py pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-22 19:35:38 +02:00

.planning

docs(02-01): execution summary — auth service layer, deps, migration complete

2026-05-22 19:27:29 +02:00

backend

feat(02-02): auth API endpoints + security hardening + Python 3.9 compat

2026-05-22 19:35:38 +02:00

docker/postgres/initdb.d

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

frontend

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

.env.example

feat(02-01): add BackupCode ORM model, password_must_change field, Alembic migration, extend Settings

2026-05-22 19:19:52 +02:00

.gitignore

feat(01-05): final cutover — delete data/, prune config.py, async-only tests

2026-05-22 09:53:39 +02:00

CLAUDE.md

docs: create roadmap (5 phases)

2026-05-21 20:53:28 +02:00

docker-compose.yml

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

S

Description

No description provided

3 MiB

Languages

Python 65.7%

Vue 22.8%

JavaScript 11.3%