curo1305 8be792ab4c feat(07.3-02): ES256 JWT algorithm upgrade + startup rotation hook ...

- config.py: add refresh_token_expire_hours=16, jwt_private_key, jwt_public_key fields (D-01, D-09)
- services/auth.py: swap all 4 JWT sites to ES256 via base64-decoded PEM keys; remove HS256 (D-02, D-03)
- main.py: add _rotate_tokens_on_algorithm_change lifespan hook — bulk-revokes refresh tokens on algorithm change; idempotent on repeat boots (D-04, D-05)
- test_auth_es256.py: promote ES256-01..05 + CFG-01 stubs to 6 passing tests; RM-01..03 remain xfail
- docker-compose.yml: inject JWT_PRIVATE_KEY + JWT_PUBLIC_KEY into backend + celery-worker (D-07)
- README.md: add JWT key env vars + key generation Python one-liner snippet
- .env.example: add JWT_PRIVATE_KEY= and JWT_PUBLIC_KEY= lines
- Version bump to 0.1.2

2026-06-06 17:19:50 +02:00

..

ai

fix(celery+lmstudio): PYTHONPATH for forked workers + qwen3.5-9b thinking model support

2026-06-05 00:00:26 +02:00

api

fix(07.2): add user_nbf write to password_reset_confirm — CR-02 gap closure

2026-06-06 00:11:41 +02:00

db

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

deps

security(07.2-02): add user_nbf Redis NBF check to get_current_user

2026-06-05 19:19:06 +02:00

load_tests

test(load): add Locust load test result CSVs

2026-06-05 14:44:59 +02:00

migrations

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

services

feat(07.3-02): ES256 JWT algorithm upgrade + startup rotation hook

2026-06-06 17:19:50 +02:00

storage

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

tasks

feat(07-04): Celery retry harness + _ClassificationError sentinel (D-09/D-10)

2026-06-04 23:08:16 +02:00

tests

feat(07.3-02): ES256 JWT algorithm upgrade + startup rotation hook

2026-06-06 17:19:50 +02:00

alembic.ini

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

celery_app.py

fix(07): replace autodiscover_tasks with explicit imports — tasks/document_tasks not at tasks.tasks path

2026-06-04 23:35:15 +02:00

config.py

feat(07.3-02): ES256 JWT algorithm upgrade + startup rotation hook

2026-06-06 17:19:50 +02:00

Dockerfile

fix(06-06): patch OpenSSL CVE-2026-31789 — add apt-get upgrade to runtime Dockerfile stage

2026-06-04 19:13:05 +02:00

main.py

feat(07.3-02): ES256 JWT algorithm upgrade + startup rotation hook

2026-06-06 17:19:50 +02:00

pytest.ini

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

requirements-dev.txt

feat(06-03): add backend/requirements-dev.txt with locust pin (D-04)

2026-06-03 18:47:43 +02:00

requirements.txt

feat(07-02): singleton OpenAIProvider + GenericOpenAIProvider + MAX_AI_CHARS removal

2026-06-04 18:58:19 +02:00