Juan Denis f724cf0067 Keep live sockets alive past access-token expiry ...

Every emit re-validated the socket's saved JWT including exp, and
access tokens last 15 minutes, so metrics, terminals, logs and
notifications were cut a quarter-hour after connecting; clients do
not reconnect after a server-side disconnect. Re-checks now skip exp
only; revocation, auth_version and deactivation still end the socket,
and connecting still needs an unexpired token.

2026-10-26 00:44:28 -04:00

..

__init__.py

Add backup, monitoring, and deployment APIs

2026-01-17 12:08:02 -05:00

api_analytics.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

api_key_auth.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

api_scope_middleware.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

audit.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

demo.py

Serve the panel through the Cloud relay tunnel

2026-09-29 23:19:34 -04:00

rate_limit.py

Delete nine backend functions with no callers

2026-10-10 16:09:29 -04:00

rbac.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

request_id.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

request_profiling.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

security.py

fix(github): repair app manifest setup flow (#131)

2026-09-04 22:20:16 -04:00

session_auth.py

Keep live sockets alive past access-token expiry

2026-10-26 00:44:28 -04:00