wiggleverse-ecomm

Files

T

ben.stull 95680c9960 feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6)

Email-canonical get-or-create, peppered-hash one-time codes with 10-min TTL, single-use,
5-attempt cap, and 60s resend cooldown; uniform new-or-known (no enumeration, §6.6). All
identity rules in the domain layer once (INV-6); scenario + invariant tests green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-10 10:31:32 -07:00

conftest.py

feat(slice-1): platform/db migration runner + migration 0001 (INV-7, §6.3 schema)

2026-06-10 08:37:09 -07:00

test_accounts_request_code.py

feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6)

2026-06-10 10:31:32 -07:00

test_accounts_verify.py

feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6)

2026-06-10 10:31:32 -07:00

test_config.py

feat(slice-2): config — session secret, cookie_secure, mailer_kind (INV-8)