2 Commits

Author	SHA1	Message	Date
CyberMind-FR	4b4dfc9b5f	fix(auth): consolidate sessions/audit file constants, harden _DATA_DIR.mkdir, fix pytest.ini footgun (ref #120) ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:25:08 +02:00
CyberMind-FR	a8abe9737b	fix(auth): startup() no longer clobbers session callback; document per-dir test invocation (ref #120) ... - Remove set_session_callback(_handle_session_event) from startup() — it was overwriting the Task 13 _on_session_event registration (which uses jwt.jti) with the legacy handler (which used secrets.token_hex(8)), breaking jti-keyed session lookup in _session_validator. - Fix comment on module-load set_session_callback registration (line 167). - Add pytest.ini at worktree root: documents the api/ vs api/ namespace collision that prevents combined cross-dir collection; enforces per-directory test runs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 09:18:47 +02:00