hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 05:30:46 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2

Harden auth with revocable sessions, cookies, and single-login default.

Browse source 
Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-06 14:13:37 +08:00
parent ba33ab5c4f
commit 20c2fcd496
34 changed files with 1462 additions and 149 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tests/test_schema_patches.py
View file

@ -32,6 +32,7 @@ class SchemaPatchesTests(unittest.TestCase):
self.assertIn("must_change_password", user_cols)
self.assertIn("scopes", token_cols)
self.assertIn("expires_at", token_cols)
self.assertIn("auth_session", insp.get_table_names())
def test_domain_patches_do_not_raise(self) -> None:
with self.engine.begin() as conn:
@ -49,6 +50,8 @@ class SchemaPatchesTests(unittest.TestCase):
files = sorted(p.name for p in versions.glob("*.py") if p.name != "__init__.py")
self.assertIn("20260802_scopes.py", files)
self.assertIn("20260802_legacy_schema.py", files)
self.assertIn("20260806_auth_session.py", files)
self.assertIn("20260806_auth_refresh.py", files)
text_legacy = (versions / "20260802_legacy_schema.py").read_text(encoding="utf-8")
self.assertIn('down_revision', text_legacy)
self.assertIn("20260802_scopes", text_legacy)