ZdenekSrotyr 4aa97c23d2 fix: raise RuntimeError on missing JWT_SECRET_KEY in non-test environments ... Prevents production deployments from silently using a hardcoded default secret. TESTING=1 still resolves to a built-in test key so the existing test suite is unaffected. Adds a test that verifies the RuntimeError is raised when neither JWT_SECRET_KEY nor TESTING is set.		2026-04-09 06:54:29 +02:00
..
providers	security: fix auth (argon2, cookie, JWT), CORS, session middleware, pyproject.toml	2026-04-08 12:08:52 +02:00
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
dependencies.py	security: fix auth (argon2, cookie, JWT), CORS, session middleware, pyproject.toml	2026-04-08 12:08:52 +02:00
jwt.py	fix: raise RuntimeError on missing JWT_SECRET_KEY in non-test environments	2026-04-09 06:54:29 +02:00
router.py	fix: require password verification when user has password_hash in /auth/token	2026-04-09 06:44:31 +02:00