modbison

Files

T

History

coder-bot 3cb4d01073 Fix access token collision and cross-file username collision

- auth.py: _create_access_token had no jti claim, so two refreshes
  within the same wall-clock second produced byte-identical access
  tokens (same failure mode already fixed for refresh tokens earlier)
- test_refresh_endpoint.py: usernames (jwttoken, refreshuser, etc.)
  collided with test_auth_endpoints.py's own test usernames once run
  in the same pytest session against a shared DB with no per-test
  isolation -- exactly how run_checkpoint_tests.py invokes pytest.
  Namespaced this file's usernames with a refep_ prefix.

Full backend suite (63 tests) passes clean end-to-end against a real
Postgres with real migrations applied.

2026-08-19 22:15:55 +00:00

__init__.py

WIP checkpoint: Enforce 18+ age gate at account registration

2026-08-18 15:28:25 +00:00

test_auth_age_gate.py

Recovered orphaned WIP before switching to a new task

2026-08-18 15:33:32 +00:00

test_auth_endpoints.py

Fix broken integration test fixture (dead imports, sync/async mismatch, cross-request connection reuse, username collision)

2026-08-19 21:11:00 +00:00

test_gltf_metadata.py

WIP checkpoint: US-1: Asset Import Pipeline — glTF upload endpoint with metadata extraction