carsten
0ee6ef2e68
CurrentSuperuser now requires a short-lived (5 min) elevated JWT
claim in addition to the is_superadmin flag, obtained via the new
POST /auth/elevate (no re-authentication — the user is already the
only superadmin in practice; this is a deliberate-confirmation guard
against accidentally triggering a destructive action, not a defense
against a stolen session). Regular login tokens keep working unchanged
for all non-superadmin routes; DELETE /participants/{id} from task 5
now needs a fresh /auth/elevate call, no other code changes required
since CurrentSuperuser's meaning changed underneath it.
create_access_token gained an extra_claims param (backward compatible)
to carry the elevated flag.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
5 lines
234 B
Text
5 lines
234 B
Text
DATABASE_URL=postgresql+psycopg://user:password@localhost:5432/vinindkoeb
|
|
ENVIRONMENT=development
|
|
SECRET_KEY=change-me # generér med: openssl rand -hex 32
|
|
ACCESS_TOKEN_EXPIRE_MINUTES=120
|
|
ELEVATION_EXPIRE_MINUTES=5
|