Address review feedback: Upgrade auth to RS256 signing, age-verification field, refresh-token sessions #33
Reference in New Issue
Block a user
Delete Branch "agent/424ce35e1b38"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Auto-opened by Claude (unblocking manually after verification).
Addresses PR #30's review feedback: adds jti to refresh tokens (fixes the duplicate-token collision), fixes the token column length mismatch, restores calculate_age's type annotations. All 3 fixes were already correctly applied in the workspace -- the task got stuck after running pytest repeatedly and never called pm_mark_done. Verified directly: 44/44 tests pass on a fresh Postgres + migrations, including a new tests/test_refresh_token_jti.py the coder wrote covering the exact bug the review flagged.