mteehan 0889ef0d08 fix: prevent data loss in update_permissions and token_refresh ...

- update_permissions: swap to upsert-first-then-delete-stale so a
  failed upsert mid-loop rolls back cleanly, leaving the user's
  permissions intact. Adds Q_DELETE_PERMISSION_SUBSYSTEM for
  targeted removal.

- auth_refresh: generate and persist the new refresh token before
  blacklisting/clearing the old one, so a failure in generate_tokens
  doesn't leave the user locked out with no valid refresh token.

2026-08-12 16:37:06 +00:00

..

handlers

fix: prevent data loss in update_permissions and token_refresh

2026-08-12 16:37:06 +00:00

__init__.py

refactor: introduce two-user daemon architecture with socket-based communication

2026-05-27 23:39:33 +00:00

__main__.py

refactor: introduce two-user daemon architecture with socket-based communication

2026-05-27 23:39:33 +00:00

client.py

docs: add comprehensive docstrings and inline comments

2026-07-13 17:26:45 +00:00

iface.py

Auth: rate limiter, WebAuthn domain awareness, misc fixes

2026-07-29 02:48:53 +00:00

server.py

auth: make session binding optional, enforce WebAuthn credential ownership

2026-08-12 14:16:49 +00:00