Indiana 10ac364a90 fix: use https base_url in test client so Secure cookies propagate automatically ...

httpx's cookie jar only auto-attaches Secure cookies to https:// requests.
Switching the ASGITransport client fixture's base_url from http://test to
https://test (no real socket is opened either way) makes it behave like a
browser talking to the Cloudflare-Tunnel-terminated HTTPS edge in
production, eliminating the need for manual client.cookies.set(...)
re-injection workarounds in test_auth.py.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013PphXq1s43DNRj1uWKGXof

2026-07-20 15:44:01 +00:00

..

app

fix: harden login/logout — secure cookie, server-side session revocation, timing-safe login

2026-07-20 15:34:12 +00:00

tests

fix: use https base_url in test client so Secure cookies propagate automatically

2026-07-20 15:44:01 +00:00

pytest.ini

chore: scaffold backend venv, health check, systemd unit

2026-07-20 14:52:53 +00:00

requirements.txt

chore: scaffold backend venv, health check, systemd unit

2026-07-20 14:52:53 +00:00