|
|
178d40d036
|
feat: JWT auth, bcrypt, MFA, dependency injection, security tests
Add core security layer:
- security.py: password hashing (bcrypt), JWT access/refresh tokens,
SHA-256 token hashing, TOTP MFA (generate, verify, provisioning URI),
plus passlib/bcrypt 5.x compatibility patch
- dependencies.py: FastAPI deps for get_current_user (Bearer JWT) and
require_admin (role check)
- exceptions.py: domain-specific HTTP exceptions (CaseNotFound,
DuplicateCase, InvalidImportFile, ICDValidation, AccountLocked,
InvalidCredentials)
- test_security.py: 9 tests covering all security functions
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-24 07:41:35 +00:00 |
|
