ben.stull cfd2b4ecc7 feat(slice-2): BFF /api/auth/* — request-code, verify, me, logout (§6.4) ...

Screen-shaped JSON endpoints; signed-cookie session on verify; §6.4 error envelope;
storefront hard-wired null behind the _storefront_for seam (SLICE-3 fills it). No
enumeration: uniform 204. PUC-9 logout clears the cookie.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-10 10:35:01 -07:00

..

conftest.py

…

test_accounts_request_code.py

feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6)

2026-06-10 10:31:32 -07:00

test_accounts_verify.py

feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6)

2026-06-10 10:31:32 -07:00

test_auth_endpoints.py

feat(slice-2): BFF /api/auth/* — request-code, verify, me, logout (§6.4)

2026-06-10 10:35:01 -07:00

test_config.py

feat(slice-2): config — session secret, cookie_secure, mailer_kind (INV-8)

2026-06-10 10:26:15 -07:00

test_healthz.py

feat(slice-1): FastAPI factory + /healthz; self-migrate at startup (INV-1/§6.4)

2026-06-10 08:38:42 -07:00

test_mailer.py

feat(slice-2): platform/mailer port + LogMailer (dev channel, §6.2/PUC-10)

2026-06-10 10:26:58 -07:00

test_migrations.py

…

test_session.py

feat(slice-2): platform/session — stdlib HMAC signed cookie tokens (§6.2)

2026-06-10 10:27:35 -07:00