fix auth: validate logout body, harden WebAuthn, optimize list_users

- Raise ValueError on missing request body in auth_logout - Add username check in verify_authentication to prevent credential reuse - Replace N+1 queries in list_users with single JOIN query
2026-08-12 03:58:54 +00:00
parent ba0c7bfa9b
commit 6f728cf853
5 changed files with 24 additions and 13 deletions
@@ -53,6 +53,7 @@ Q_SELECT_WEBAUTHN_COUNTS = "select_webauthn_counts"
 Q_DELETE_WEBAUTHN = "delete_webauthn"
 Q_UPDATE_WEBAUTHN_SIGN_COUNT = "update_webauthn_sign_count"
 Q_SELECT_ALL_USERS = "select_all_users"
+Q_SELECT_USERS_WITH_PERMS = "select_users_with_perms"
 Q_SELECT_USER_JWT_SECRET = "select_user_jwt_secret"
 Q_UPDATE_JWT_SECRET = "update_jwt_secret"