curo1305 30ad9fd015 security(07.2-02): add user_nbf Redis NBF check to get_current_user ...

- Added import logging + _logger = logging.getLogger(__name__) to deps/auth.py
- Inserted user_nbf Redis check block after decode_access_token in get_current_user
- Check reads user_nbf:{payload['sub']} from Redis; rejects if payload['iat'] < stored timestamp
- Uses strict < comparison (token issued exactly at event second is allowed — D-02)
- Handles both bytes and str returns from Redis for FakeRedis/aioredis compatibility
- except HTTPException: raise guard precedes broad except Exception (T-7.2-02 Pitfall 1)
- Broad except logs warning and fails open (D-04 — Redis outage must not block requests)
- Promoted all 3 Wave 0 NBF xfail stubs to passing assertions in test_auth_deps.py

2026-06-05 19:19:06 +02:00

..

__init__.py

feat(01-03): add full v1 ORM schema, async session factory, and DB dependency

2026-05-22 09:16:21 +02:00

auth.py

security(07.2-02): add user_nbf Redis NBF check to get_current_user

2026-06-05 19:19:06 +02:00

db.py

feat(01-03): add full v1 ORM schema, async session factory, and DB dependency

2026-05-22 09:16:21 +02:00

utils.py

fix(06): WR-04 add 10.0.0.0/8 to trusted proxy CIDR list

2026-06-04 23:15:48 +02:00