4 Commits

Author	SHA1	Message	Date
benya	27d3340a37	feat(auth): add TOTP 2FA setup and login verification ... - add user twofa fields and migration - add 2FA setup/enable/disable endpoints - enforce OTP on login when 2FA enabled - add web login OTP field and settings UI	2026-03-08 11:43:51 +03:00
benya	0b4bb19425	feat(chat): add random public_id and fix users blocked route ... - add chats.public_id random identifier with migration 0011 - expose public_id in chat API payloads - use chat public_id in message search UI label - fix users router order so /users/blocked no longer conflicts with /users/{user_id}	2026-03-08 02:34:24 +03:00
benya	85631b566a	Implement security hardening, notification pipeline, and CI test suite ... Security hardening: - Added IP/user rate limiting with Redis-backed counters and fail-open behavior. - Added message anti-spam controls (per-chat rate + duplicate cooldown). - Implemented refresh token rotation with JTI tracking and revoke support. Notification pipeline: - Added Celery app and async notification tasks for mention/offline delivery. - Added Redis-based presence tracking and integrated it into realtime connect/disconnect. - Added notification dispatch from message flow and notifications listing endpoint. Quality gates and CI: - Added pytest async integration tests for auth and chat/message lifecycle. - Added pytest config, test fixtures, and GitHub Actions CI workflow. - Fixed bcrypt/passlib compatibility by pinning bcrypt version. - Documented worker and quality-gate commands in README.	2026-03-07 21:46:30 +03:00
benya	a879ba7b50	first commit	2026-03-07 21:31:38 +03:00