3 Commits

Author	SHA1	Message	Date
serversdown	2879abb355	feat(auth): deny-by-default gate middleware + require_role ... Adds operator_gate Starlette HTTP middleware that gates every route except an explicit allow-list. Flag defaults OFF so all existing behaviour and tests are unchanged. wire_operator_auth helper in conftest lets tests monkeypatch the module-global SessionLocal and flag, keeping the gate's own DB session pointed at the test engine. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-17 19:27:41 +00:00
serversdown	33069a070d	test: tidy conftest fixtures per review (drop dead try/finally, scope override cleanup, rm unused import)	2026-06-15 23:28:16 +00:00
serversdown	ec5d986ac5	test: stand up pytest harness + add argon2-cffi ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-15 23:23:41 +00:00