admin.schubert/Validation_Suite
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): correct local cookie security configuration

Browse source
This commit is contained in:
Schubert Ferenc 2026-07-11 15:50:15 +02:00
parent b584e60273
commit 155fdbb16a
67 changed files with 1003 additions and 62 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
validation-suite/backend/mercury/app/core/__pycache__/config.cpython-313.pyc Normal file
View file

Binary file not shown.

BIN
validation-suite/backend/mercury/app/core/__pycache__/security.cpython-313.pyc Normal file
View file

Binary file not shown.

3
validation-suite/backend/mercury/app/core/security.py
View file

@ -18,6 +18,5 @@ def verify_password(password: str, password_hash: str) -> bool:
def create_access_token(subject: str, role: str) -> str:
expires_at = datetime.now(UTC) + timedelta(minutes=settings.access_token_minutes)
payload = {"sub": subject, "role": role, "exp": expires_at}
payload = {"sub": subject, "role": role, "iss": settings.app_name, "iat": datetime.now(UTC), "type": "access", "exp": expires_at}
return jwt.encode(payload, settings.jwt_secret, algorithm=settings.jwt_algorithm)