oliver 20c2fcd496 Harden auth with revocable sessions, cookies, and single-login default. ... Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default. Co-authored-by: Cursor <cursoragent@cursor.com>		2026-08-06 14:13:37 +08:00
..
20260802_legacy_schema.py	Move schema evolution to Alembic with auto-upgrade on API start.	2026-08-02 16:41:56 +08:00
20260802_scopes.py	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets.	2026-08-02 16:24:34 +08:00
20260806_auth_refresh.py	Harden auth with revocable sessions, cookies, and single-login default.	2026-08-06 14:13:37 +08:00
20260806_auth_session.py	Harden auth with revocable sessions, cookies, and single-login default.	2026-08-06 14:13:37 +08:00