Kyle Pope 0c7d057654 Auto-derive COOKIE_SECURE from ENVIRONMENT setting ...

COOKIE_SECURE now defaults to None and auto-derives from ENVIRONMENT
(production → true, else false) via a Pydantic model_validator. Explicit
env var values are still respected as an override escape hatch. Adds a
startup log line showing the resolved value. Restructures .env.example
with clear sections and inline docs, removes redundant production
checklist block.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-02 15:38:54 +08:00

..

jobs

Fix QA review #2: W-03/W-04, S-01 through S-04

2026-02-27 05:41:16 +08:00

models

Add user profile fields + IAM search, email column, detail panel

2026-02-27 22:40:20 +08:00

routers

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

schemas

Add user profile fields + IAM search, email column, detail panel

2026-02-27 22:40:20 +08:00

services

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

config.py

Auto-derive COOKIE_SECURE from ENVIRONMENT setting

2026-03-02 15:38:54 +08:00

database.py

Fix code review findings: security hardening and frontend fixes

2026-02-16 07:49:21 +08:00

main.py

H-01: Add global CSRF middleware for all mutating endpoints

2026-02-27 15:39:42 +08:00