Logo
Explore Help
Register Sign In
scripte/timemaster
Watch 1
Star 0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
738e940268b3ec880c32aced21803c6596251a33
timemaster/backend/app
T
History
patrickandClaude Sonnet 4.6 738e940268 fix: Refresh-Endpoint bevorzugt Body-Token über Cookie (Token-Rotation Test)
Body-Token hat Vorrang wenn explizit angegeben — verhindert dass
httpx-Cookie-Jar im Test den alten Token mit dem neuen Cookie überschreibt.
Browser-Clients senden keinen Body, nutzen weiterhin Cookie.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-26 13:14:44 +02:00
..
core
security: H-1 settings-Whitelist + H-5 UUID-Guard + H-6 DNS-Pinning + H-7 Heartbeat-Timing
2026-05-26 11:35:18 +02:00
models
feat: FZA Einzelstunden + Security-Fixes (K-1–K-5, H-2–H-4, M-1/M-3/M-6)
2026-05-26 11:13:42 +02:00
routers
fix: Refresh-Endpoint bevorzugt Body-Token über Cookie (Token-Rotation Test)
2026-05-26 13:14:44 +02:00
schemas
security: H-1 settings-Whitelist + H-5 UUID-Guard + H-6 DNS-Pinning + H-7 Heartbeat-Timing
2026-05-26 11:35:18 +02:00
services
security: N-1 uvicorn proxy-headers + N-2 Token-Reuse-Detection + N-3 XSS-Audit + N-4 Token-URL-Fragment + N-5 pip-audit CI
2026-05-26 12:55:41 +02:00
__init__.py
Initial commit – TimeMaster Zeiterfassung & HR-Tool
2026-05-23 20:03:27 +02:00
main.py
security: M-2 HttpOnly-Cookie + M-4 TrustedHost-Warning + M-5 TOTP-Lockout + M-7 zentraler get_client_ip()
2026-05-26 11:25:24 +02:00
Powered by Gitea Version: 1.27.3 Page: 38ms Template: 4ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API