justin 5123c85397 Add auth foundation: sessions/tokens schema, Argon2 hashing, config ...

Two tables (sessions, user_tokens) + migration; only token *hashes* are stored, so a DB leak yields no usable credential. Argon2id password hashing and token primitives in app/core/security. Config and .env.example gain session/cookie/token TTLs, app base URL, and SMTP settings (twelve-factor). Migration verified reversible (drops the token_purpose enum) and matches the models.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Justin Paul <justin@jpaul.me>

2026-06-06 10:51:51 -04:00

..

versions

Add auth foundation: sessions/tokens schema, Argon2 hashing, config

2026-06-06 10:51:51 -04:00

env.py

Add core data model (12 tables) and initial Alembic migration

2026-06-06 10:40:00 -04:00

script.py.mako

Add core data model (12 tables) and initial Alembic migration

2026-06-06 10:40:00 -04:00