peter 02714e4986 fix(auth): a cookie that lands after sign-out no longer signs the browser back in ...

A renewal answers with the session its request started with. Each session now
carries an id; signing out, or signing in as someone else, revokes it
(revoked_sessions, migration 0120), and a cookie carrying a revoked id is
refused. A cookie from before session ids gets one drawn from the cookie
itself. The race after log-out-everywhere fails closed and stays.

2026-11-14 17:56:36 +01:00

..

.basedpyright

perf(feed): a shuffle walks a stored random key instead of sorting the whole scope

2026-11-07 04:00:00 +01:00

alembic

fix(auth): a cookie that lands after sign-out no longer signs the browser back in

2026-11-14 17:56:36 +01:00

app

fix(auth): a cookie that lands after sign-out no longer signs the browser back in

2026-11-14 17:56:36 +01:00

tests

fix(auth): a cookie that lands after sign-out no longer signs the browser back in

2026-11-14 17:56:36 +01:00

alembic.ini

test: the gate's output carries no noise to hide a real warning in

2026-09-17 03:03:37 +02:00

docker-compose.test.yml

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

Dockerfile.test

build(deps): pin a reproducible lock + pip-audit; bump node 20->22 (E1 S4, SEC-5/DX-3)

2026-08-18 02:34:45 +02:00

entrypoint.sh

feat: one structured log for every process, with a request id

2026-09-16 01:37:02 +02:00

pyrightconfig.json

docs(comments): no WebSocket and no CI in the present tense

2026-10-05 00:50:36 +02:00

pytest.ini

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements-dev.txt

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements.lock

fix(downloads): Facebook files get their upload date, non-Latin names their letters

2026-11-14 01:15:17 +01:00

requirements.txt

fix(downloads): Facebook files get their upload date, non-Latin names their letters

2026-11-14 01:15:17 +01:00

ruff.toml

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00