hyungi ceabd1fcac feat(auth): JWT iat + users.password_changed_at invalidation (PR-Docsrv-JWT-Invalidation-1) ...

PR-Infra-Sec-1H Phase 0 audit 에서 DS jwt invalidation 정책 부재 확정.
password rotation 으로 구 365d JWT (voice-memo-bot 등) invalidate 안 되는
hard gate STOP 진입 → 선행 PR 분리.

- migration 269: users.password_changed_at timestamptz NULL (legacy 호환)
- create_access_token / create_refresh_token: payload 에 iat (int 초) 추가
- verify_password_changed_at helper: int(password_changed_at.timestamp()) > int(iat) 시 401
- get_current_user + refresh_token route: verify helper 호출
- change_password / setup signup / seed_admin INSERT+UPDATE: password_changed_at 갱신

NULL = 검증 skip (migration 직후 운영 영향 0). 첫 password 변경 후만 iat
검증 활성. Sec-1H 의 G-token-old hard gate 통과 path 확보.

2026-05-17 06:20:18 +00:00

..

ai

refactor(ai): PR #20 reframe cleanup — Ollama LLM 잔재 주석 정정

2026-05-15 12:09:15 +00:00

api

feat(auth): JWT iat + users.password_changed_at invalidation (PR-Docsrv-JWT-Invalidation-1)

2026-05-17 06:20:18 +00:00

core

feat(auth): JWT iat + users.password_changed_at invalidation (PR-Docsrv-JWT-Invalidation-1)

2026-05-17 06:20:18 +00:00

models

feat(auth): JWT iat + users.password_changed_at invalidation (PR-Docsrv-JWT-Invalidation-1)

2026-05-17 06:20:18 +00:00

policy

fix(policy): mount domain_policy.yaml into fastapi + multi-path loader

2026-04-24 09:45:10 +09:00

prompts

feat(briefing): add morning briefing schema + services + api (historical off)

2026-05-12 12:58:50 +09:00

services

refactor(search): swap 10 call sites to acquire_mlx_gate(Priority.*) (B-1)

2026-05-17 08:51:57 +09:00

templates

feat: implement Phase 0 auth system, setup wizard, and Docker config

2026-04-02 13:21:45 +09:00

workers

refactor(search): swap 10 call sites to acquire_mlx_gate(Priority.*) (B-1)

2026-05-17 08:51:57 +09:00

Dockerfile

fix(ui): 카테고리 내비 상단 이동 + uvicorn proxy-headers

2026-04-24 07:28:04 +09:00

main.py

feat(study): Mac mini derived-worker (PR-MacMini-Derived-Worker-1)

2026-05-15 03:13:43 +00:00

requirements.txt

feat(ingest): devonagent 트랙 Phase 1 ingest 활성화

2026-05-15 21:23:16 +09:00