anti/stealergram
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rename to stealergram, add pyproject.toml, purge em-dashes

Browse Source 
- Rename project to stealergram throughout
- Add pyproject.toml (replaces requirements.txt split, folds pytest.ini)
- Replace all em-dashes with hyphens across all source files

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
anti
2026-05-19 10:06:30 -04:00
parent 4c104cddd2
commit 741e6bb0d3
46 changed files with 244 additions and 191 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web/auth.py
View File

@@ -1,9 +1,9 @@
"""
web/auth.py — JWT signing/verification and bcrypt password helpers.
web/auth.py - JWT signing/verification and bcrypt password helpers.
Tokens:
access — HS256, 15 min TTL, payload: {sub, role, type:"access"}
refresh — HS256, 7 day TTL, payload: {sub, jti, type:"refresh"}
access - HS256, 15 min TTL, payload: {sub, role, type:"access"}
refresh - HS256, 7 day TTL, payload: {sub, jti, type:"refresh"}
Both tokens live in httpOnly SameSite=Strict cookies.
The `type` claim prevents an access token being used as a refresh token.