curo1305andClaude Sonnet 4.6 c38c6b1c01 feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03 ...

- revoke_all_refresh_tokens: add skip_token_hash optional param (exclude
  current session while revoking others)
- change_password, enable_totp, disable_totp: call revoke with skip hash
  derived from refresh cookie; return sessions_revoked in response and
  write to audit log metadata_
- 3 new tests: test_{change_password,enable_totp,disable_totp}_revokes_other_sessions
  — all PASSED; 373 total passing, 0 regressions
- Frontend toasts: SettingsAccountTab + TotpEnrollment show
  "Other sessions have been terminated." when sessions_revoked > 0
- Companion fixes: rate_limiting get_client_ip refactor, deps/auth.py
  request.state.current_user, locustfile refresh-token task removal
- Version bump: 0.1.0 → 0.1.1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-05 12:47:16 +02:00

.planning

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

backend

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

docker

feat(06-02): add Loki + Promtail + Grafana stack to docker-compose

2026-06-03 18:49:41 +02:00

frontend

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

.env.example

feat(05-01): add Phase 5 cloud storage packages and config settings

2026-05-28 20:48:38 +02:00

.gitignore

chore: add .DS_Store, node_modules/, screenshots/ to .gitignore

2026-05-30 11:58:51 +02:00

.trivyignore

fix(06-06): patch OpenSSL CVE-2026-31789 — add apt-get upgrade to runtime Dockerfile stage

2026-06-04 19:13:05 +02:00

CLAUDE.md

feat(07.1): session revocation on privilege change — CR-01/CR-02/CR-03

2026-06-05 12:47:16 +02:00

docker-compose.yml

fix(celery+lmstudio): PYTHONPATH for forked workers + qwen3.5-9b thinking model support

2026-06-05 00:00:26 +02:00

RUNBOOK.md

docs(06-06): add RUNBOOK.md — env vars, startup, backup, health checks, escalation, failure modes

2026-06-04 19:05:05 +02:00

SECURITY.md

docs(phase-7): add security threat verification — 12/12 CLOSED

2026-06-05 10:50:44 +02:00

TEST_ACCOUNTS.md

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

test_integration.py

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

S

Description

No description provided

8.1 MiB

Languages

Python 57.2%

JavaScript 16.5%

HTML 14.2%

Vue 12%