YueGuobin 200ccf0dfe

mcp: fingerprint short-lived console tokens for copy-corruption checks ...

node_console_info now returns token_sha256_prefix (sha256, first 8 hex
chars) and token_ttl_seconds alongside the console WebSocket URL, and
controller WebSocket auth rejections include the sha256 prefix of the
token as received. Comparing the two immediately distinguishes a token
corrupted in transfer from server-side rejection causes (expired,
revoked, bad signature).

2026-08-21 21:41:47 +08:00

..

__init__.py

Refactor tests and start work on database integration.

2020-12-02 18:39:08 +10:30

authentication.py

mcp: fingerprint short-lived console tokens for copy-corruption checks

2026-08-21 21:41:47 +08:00

database.py

Remove unused imports (logging, log, select)

2026-06-16 22:25:07 +08:00

rbac.py

fix(rbac): guard None current_user on websocket auth failure

2026-07-16 00:51:45 +08:00