curo1305 c4613b6b87 feat(02-01): implement deps/auth.py FastAPI dependency chain with tests ...

- get_current_user: validates Bearer JWT via decode_access_token, loads User from DB
  raises HTTP 401 on invalid/expired token, missing user, or deactivated account
- get_current_admin: wraps get_current_user, raises HTTP 403 on role != 'admin' (T-02-07)
- Admin impersonation architecturally excluded (ADMIN-07, T-02-08) — no code path bypasses role check
- tests/test_auth_deps.py: 7 tests covering happy path, tampered token, inactive user, 403 non-admin, 200 admin

2026-05-22 19:25:16 +02:00

.planning

docs(02): create phase 2 plan — Users & Authentication

2026-05-22 19:13:44 +02:00

backend

feat(02-01): implement deps/auth.py FastAPI dependency chain with tests

2026-05-22 19:25:16 +02:00

docker/postgres/initdb.d

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

frontend

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

.env.example

feat(02-01): add BackupCode ORM model, password_must_change field, Alembic migration, extend Settings

2026-05-22 19:19:52 +02:00

.gitignore

feat(01-05): final cutover — delete data/, prune config.py, async-only tests

2026-05-22 09:53:39 +02:00

CLAUDE.md

docs: create roadmap (5 phases)

2026-05-21 20:53:28 +02:00

docker-compose.yml

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

S

Description

No description provided

3 MiB

Languages

Python 65.7%

Vue 22.8%

JavaScript 11.3%