Started change of login secrets handling

[backend] Created new alembic migration to remove unused photo_path_aux column from users table. This new migration also changes default admin password to new hashing method
[backend] Moved password hashing on login to backend
[backend] Added env variable for expire token in minutes
[backend] Rename file schema_session/schema_access_token to dependencies_security
[backend] Started changing session dependencies functions to handle token in the request cookie
[frontend] Started updating api calls logic
[frontend] Moved login store logic to pinea store instead of local storage
[README] Updated README with new env variable for backend
This commit is contained in:
João Vitória Silva
2024-06-07 22:52:48 +01:00
parent 7a90182e72
commit 3d0507528d
26 changed files with 761 additions and 414 deletions

View File

@@ -88,8 +88,9 @@ DB_USER | endurain | Yes | N/A
DB_PASSWORD | changeme | `No` | N/A
DB_DATABASE | endurain | Yes | N/A
SECRET_KEY | changeme | `No` | N/A
ALGORITHM | HS256 | Yes | N/A
ACCESS_TOKEN_EXPIRE_MINUTES | 30 | Yes | N/A
ALGORITHM | HS256 | Yes | Currently only HS256 is supported
ACCESS_TOKEN_EXPIRE_MINUTES | 15 | Yes | N/A
REFRESH_TOKEN_EXPIRE_DAYS | 7 | Yes | N/A
STRAVA_CLIENT_ID | changeme | `No` | N/A
STRAVA_CLIENT_SECRET | changeme | `No` | N/A
STRAVA_AUTH_CODE | changeme | `No` | N/A