root
be0750d001
- Magic-link auth (sha256-only token storage, 15-min single-use, 7-day sessions) - Staff-key auth via X-DRE-Staff-Key (constant-time compare) - SQLite WAL, foreign_keys, parameterized queries, atomic DRE/CLT sequence allocation - Intake validator rejects SSN/PAN patterns (FDCPA/TDCPA compliance) - Document upload allowlist + magic-byte check, 20MB cap - Unified error envelope, money as integer cents - systemd unit (port 8093, User=root, hardening directives) - Fixes import bug (auth.py relative imports) and audit_log placeholder mismatch
6 lines
98 B
Plaintext
6 lines
98 B
Plaintext
fastapi>=0.110
|
|
uvicorn[standard]>=0.29
|
|
python-multipart>=0.0.9
|
|
email-validator>=2.0
|
|
pydantic>=2.6
|