Lukas cee3daffc1 fix: enforce PRAGMA query_only on fail2ban DB and refactor CSRF cookie name ...

- Add _acquire_readonly_connection() that applies PRAGMA query_only=ON after connect
- Verify PRAGMA value back to catch URI flag bypasses
- Wrap in async context manager _readonly_connection() used by all repo methods
- Replace hardcoded '_SESSION_COOKIE_NAME' in CSRF middleware with import from
  app.utils.constants
- Remove completed Issues #45 and #46 from Docs/Tasks.md (Issue #46 now fixed,
  #45 cache invalidation deferred to auth refactor branch)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-05-03 21:47:42 +02:00

..

mappers

Fix HIGH priority issues: unbounded queries, rate limiting, health checks

2026-05-01 21:47:36 +02:00

middleware

fix: enforce PRAGMA query_only on fail2ban DB and refactor CSRF cookie name

2026-05-03 21:47:42 +02:00

models

refactor(backend): clean up models setup, improve ip utils, add adr docs

2026-05-03 18:04:45 +02:00

repositories

fix: enforce PRAGMA query_only on fail2ban DB and refactor CSRF cookie name

2026-05-03 21:47:42 +02:00

routers

fix(auth): invalidate session cache on login

2026-05-03 20:51:51 +02:00

services

fix(auth): invalidate session cache on login

2026-05-03 20:51:51 +02:00

tasks

Refactor backend: fix geo cache cleanup, scheduler heartbeat, correlation middleware; update docs

2026-05-03 16:02:40 +02:00

utils

feat(rate-limiting): add per-bucket limits and startup validation

2026-05-03 20:53:21 +02:00

__init__.py

Sync backend/frontend versions to Docker/VERSION and read version from it

2026-03-19 19:13:38 +01:00

config.py

refactor(backend): clean up jail service, add error handling service

2026-05-03 17:40:37 +02:00

db.py

fix: atomic upsert for import runs (Issue #12)

2026-05-02 23:39:43 +02:00

dependencies.py

feat: implement API versioning /api/v1/

2026-05-02 21:29:30 +02:00

exceptions.py

refactor(ban_service): extract _bans_by_country_load_data helper

2026-05-03 17:00:34 +02:00

main.py

feat: enforce single-worker at startup

2026-05-03 20:33:23 +02:00

startup_dag.py

10) Implement explicit startup DAG for resource initialization

2026-04-28 08:08:05 +02:00

startup.py

feat(rate-limiting): add per-bucket limits and startup validation

2026-05-03 20:53:21 +02:00