Repository navigation

cache asserts and session security flaws - #42

Merged

heitorrosa merged 20 commits into

mainfrom

dev

Sep 29, 2026

Commits on Sep 29, 2026
- introspect
  heitorrosa
  committed
  856ce05
- fix historicaldividends backfill for missing ov key
  heitorrosa
  committed
  0d11867
- harden controller auth paths
  heitorrosa
  committed
  1c953f1
- enforce session lifecycle and username uniqueness
  heitorrosa
  committed
  d87785c
- salt api keys and gate token introspection
  heitorrosa
  committed
  5a064a7
- scraper fix
  heitorrosa
  committed
  95f4d92
- evict sessions on sso and enforce secure cookies
  heitorrosa
  committed
  09a2310
- https
  heitorrosa
  committed
  94f809a
- fix stocknews toDict typo
  heitorrosa
  committed
  99a90d7
- align dividends tests with nan backfill
  heitorrosa
  committed
  47d20c5
- format code with ruff
  heitorrosa
  committed
  e781165
- presort stocks cache at build time
  heitorrosa
  committed
  271d47b
- load stocks cache with zero-copy memory mapping
  heitorrosa
  committed
  6bdcd86
- add nginx scaling implementation and benchmark plan
  heitorrosa
  committed
  26e9687
- accept arrow-backed dtypes in json deserialization
  heitorrosa
  committed
  c2eb500
- untrack nginx scaling draft plan
  heitorrosa
  committed
  cb1363b
- silence bandit false positives with nosec annotations
  heitorrosa
  committed
  8a0654c
- remove unused session middleware and derive introspect token from jwt key
  heitorrosa
  committed
  5fb2279
- annotate multi-entity query rows in getUserSessions
  heitorrosa
  committed
  76217ac
- assert arrow-backed dtype by kind, not string width
  heitorrosa
  committed
  773ee1f

Navigation Menu

Repository navigation

cache asserts and session security flaws - #42

cache asserts and session security flaws#42
heitorrosa merged 20 commits into
mainfrom
dev

Commits on Sep 29, 2026

introspect

fix historicaldividends backfill for missing ov key

harden controller auth paths

enforce session lifecycle and username uniqueness

salt api keys and gate token introspection

scraper fix

evict sessions on sso and enforce secure cookies

https

fix stocknews toDict typo

align dividends tests with nan backfill

format code with ruff

presort stocks cache at build time

load stocks cache with zero-copy memory mapping

add nginx scaling implementation and benchmark plan

accept arrow-backed dtypes in json deserialization

untrack nginx scaling draft plan

silence bandit false positives with nosec annotations

remove unused session middleware and derive introspect token from jwt key

annotate multi-entity query rows in getUserSessions

assert arrow-backed dtype by kind, not string width