peter f1d0845923 fix(auth): refusing a revoked session no longer deletes a newer sign-in's cookie ...

The refusal cleared the session, so a request in flight with the previous account's cookie
answered with a cookie deletion that could land after a sign-in as someone else. A revoked id is
refused on every request anyway. Also a test for the pruning of old revocations.

2026-11-14 19:32:01 +01:00

..

.basedpyright

perf(feed): a shuffle walks a stored random key instead of sorting the whole scope

2026-11-07 04:00:00 +01:00

alembic

fix(auth): a cookie that lands after sign-out no longer signs the browser back in

2026-11-14 17:56:36 +01:00

app

fix(auth): refusing a revoked session no longer deletes a newer sign-in's cookie

2026-11-14 19:32:01 +01:00

tests

fix(auth): refusing a revoked session no longer deletes a newer sign-in's cookie

2026-11-14 19:32:01 +01:00

alembic.ini

test: the gate's output carries no noise to hide a real warning in

2026-09-17 03:03:37 +02:00

docker-compose.test.yml

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

Dockerfile.test

build(deps): pin a reproducible lock + pip-audit; bump node 20->22 (E1 S4, SEC-5/DX-3)

2026-08-18 02:34:45 +02:00

entrypoint.sh

feat: one structured log for every process, with a request id

2026-09-16 01:37:02 +02:00

pyrightconfig.json

docs(comments): no WebSocket and no CI in the present tense

2026-10-05 00:50:36 +02:00

pytest.ini

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements-dev.txt

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements.lock

fix(downloads): Facebook files get their upload date, non-Latin names their letters

2026-11-14 01:15:17 +01:00

requirements.txt

fix(downloads): Facebook files get their upload date, non-Latin names their letters

2026-11-14 01:15:17 +01:00

ruff.toml

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00