Fix/session and device management#67

Merged

ademboukabes merged 19 commits into

fix/session-and-device-management

Jul 18, 2026

Commits on Jul 16, 2026

Merge pull request #66 from MicroClub-USTHB/develop
Tyjfre-j
authored

Commits on Jul 17, 2026

Commits on Jul 18, 2026

feat(session): add SESSION_ACTIVITY_THROTTLE_SECONDS setting (default 60s)
Tyjfre-j
committed
fix(security): neutralize '..' path traversal sequences in sanitise_filename
Tyjfre-j
committed
feat(session): throttled last_active update on fast path; honest docstring
Tyjfre-j
committed
feat(session): add last_active to MobileSessionCache; update cache_session_for_auth signature
Tyjfre-j
committed
feat(session): replace hard-reject session cap with LRU eviction
Tyjfre-j
committed
test(image): update enrollment security tests for app.core.image_validation refactor
Tyjfre-j
committed
test(session): rewrite TestSessionLimit to assert LRU eviction behavior
Tyjfre-j
committed
test(auth): add regression tests for FK bug, cap-vs-replace, device reuse
Tyjfre-j
committed
test(integration): add real-DB tests for session replace and cascade delete
Tyjfre-j
committed
fix: added missing last active field
Tyjfre-j
committed