serversdown 4abfcbc293 feat(auth): OperatorUser model + role ladder ...

Add OperatorUser SQLAlchemy model (operator_users table, auto-created by
create_all) with email uniqueness, default active/must_change_password/
failed_login_count, and sessions_valid_from truncated to whole seconds.
Add backend/operator_auth.py with feature flag, cookie constants, _ROLE_RANK
map, role_at_least(), and _norm_email() helpers.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-17 19:08:18 +00:00

..

__init__.py

test: stand up pytest harness + add argon2-cffi

2026-06-15 23:23:41 +00:00

conftest.py

test: tidy conftest fixtures per review (drop dead try/finally, scope override cleanup, rm unused import)

2026-06-15 23:28:16 +00:00

test_auth_passwords.py

refactor: simplify verify_password except clause; drop unused import

2026-06-15 23:31:14 +00:00

test_cookie_secure.py

feat: env-driven Secure flag on portal session cookie

2026-06-16 00:16:54 +00:00

test_operator_cookies.py

feat(auth): generic HMAC signed-cookie module for operator auth

2026-06-17 19:05:56 +00:00

test_operator_model.py

feat(auth): OperatorUser model + role ladder

2026-06-17 19:08:18 +00:00

test_portal_access_admin.py

feat: operator portal-access endpoints (enable/password/disable/state)

2026-06-15 23:55:10 +00:00

test_portal_auth_helpers.py

fix: link project to its portal client (project.client_id) so the portal isn't empty

2026-06-15 23:53:19 +00:00

test_portal_gate.py

fix: treat enabled-but-passwordless portal as inactive (no dead form / self-lockout)

2026-06-15 23:46:14 +00:00

test_portal_migration.py

feat: add per-project portal gate columns + migration

2026-06-15 23:32:41 +00:00

test_portal_scope.py

refactor: final-review cleanup

2026-06-16 00:28:23 +00:00

test_retired_routes.py

fix: retire portal_admin mint-link (dead /portal/enter URL); refresh docstrings; assert revoke route gone

2026-06-16 00:15:09 +00:00