Carlos Escalante 15ea1ef4c2 Fail fast on missing or weak auth secrets; 7-day tokens ...

SECRET_KEY, ADMIN_USERNAME, and ADMIN_PASSWORD no longer have working
defaults: the backend refuses to boot if they are unset, default, or
weak (SEC-01). Token expiry drops from 30 to 7 days (SEC-05). New
COOKIE_SECURE (default true) and CORS_ORIGINS settings. Dev compose now
sources credentials from .env with required-var errors instead of
hardcoding them (ARCH-14); .env.example documents the template.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-09 19:13:19 -06:00

..

agent

Wrap transaction_type in col() for notin_ filter

2026-04-29 22:58:28 -06:00

api

Add cookie-based SPA auth and update container plumbing

2026-04-29 22:02:02 -06:00

models

Remove Ahorro from budget UI, add SALARY type and savings auto-accrual

2026-04-15 19:13:29 -06:00

services

Remove Ahorro from budget UI, add SALARY type and savings auto-accrual

2026-04-15 19:13:29 -06:00

__init__.py

Add budget module: FastAPI backend + React frontend

2026-03-21 11:33:38 -06:00

auth.py

Add cookie-based SPA auth and update container plumbing

2026-04-29 22:02:02 -06:00

config.py

Fail fast on missing or weak auth secrets; 7-day tokens

2026-06-09 19:13:19 -06:00

db.py

Remove Ahorro from budget UI, add SALARY type and savings auto-accrual

2026-04-15 19:13:29 -06:00

main.py

Add cookie-based SPA auth and update container plumbing

2026-04-29 22:02:02 -06:00

seed.py

Remove MPAT and MEMP fund references from pension module

2026-04-01 10:18:36 -06:00