From 72f39bc547951e1d8b017eb696b30d74205f2926 Mon Sep 17 00:00:00 2001 From: coder-bot Date: Wed, 19 Aug 2026 19:58:20 +0000 Subject: [PATCH] WIP checkpoint: Address review feedback: Upgrade auth to RS256 signing, age-verification field, refresh-token sessions --- backend/app/models/session.py | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/backend/app/models/session.py b/backend/app/models/session.py index 274e13b..6def90e 100644 --- a/backend/app/models/session.py +++ b/backend/app/models/session.py @@ -29,8 +29,13 @@ class RefreshToken(Base): # RS256 JWTs are ~420+ chars; 512 is sufficient and matches the migration. token = Column(String(512), unique=True, index=True, nullable=False) expires_at = Column(DateTime(timezone=True), nullable=False) - is_active = Column(Boolean, default=True) - created_at = Column(DateTime(timezone=True), server_default=func.now()) - updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now()) + is_active = Column(Boolean, nullable=False, default=True, server_default="true") + created_at = Column(DateTime(timezone=True), nullable=False, server_default=func.now()) + updated_at = Column( + DateTime(timezone=True), + nullable=False, + server_default=func.now(), + onupdate=func.now(), + ) user = relationship("User", back_populates="refresh_tokens")