Address review feedback: Upgrade auth to RS256 signing, age-verification field, refresh-token sessions #33

Merged
reviewer-bot merged 7 commits from agent/424ce35e1b38 into main 2026-08-19 21:12:42 +00:00
Showing only changes of commit 72f39bc547 - Show all commits
+8 -3
View File
@@ -29,8 +29,13 @@ class RefreshToken(Base):
# RS256 JWTs are ~420+ chars; 512 is sufficient and matches the migration.
token = Column(String(512), unique=True, index=True, nullable=False)
expires_at = Column(DateTime(timezone=True), nullable=False)
is_active = Column(Boolean, default=True)
created_at = Column(DateTime(timezone=True), server_default=func.now())
updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now())
is_active = Column(Boolean, nullable=False, default=True, server_default="true")
created_at = Column(DateTime(timezone=True), nullable=False, server_default=func.now())
updated_at = Column(
DateTime(timezone=True),
nullable=False,
server_default=func.now(),
onupdate=func.now(),
)
user = relationship("User", back_populates="refresh_tokens")