YueGuobin 0e8d0cb87b

Add stateless JWT refresh token mechanism ...

- New config: Controller.jwt_refresh_token_expire_minutes (default 30 days)
- New endpoint: POST /v3/access/users/refresh (public, unauthenticated)
- Login/authenticate responses now include refresh_token
- AuthService: _create_token helper, create_refresh_token, get_token_data
  now parses type claim (token_use) for token classification
- Security: refresh tokens rejected on HTTP + WebSocket access paths;
  /refresh strictly requires type=='refresh'
- Logout works for free via existing token_version mechanism
- Tests: 9 new TestRefreshToken cases, all passing; 34 existing tests
  still pass (no regressions)

2026-06-23 22:39:11 +08:00

..

templates

Fix IOU tests

2026-03-12 14:18:35 +08:00

__init__.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

appliances.py

feat(compute): add SSH console type support

2026-04-30 15:52:47 +03:00

base.py

Pydantic v2 migration

2023-08-04 18:20:06 +10:00

capabilities.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

chat.py

feat(web-wireshark): add implementation plan for script-driven (#2666)

2026-04-20 22:56:55 +08:00

computes.py

Pydantic v2 migration

2023-08-04 18:20:06 +10:00

drawings.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

gns3vm.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

images.py

Pydantic v2 migration

2023-08-04 18:20:06 +10:00

iou_license.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

labels.py

Move schemas between compute and controller subpackages

2021-04-15 18:12:08 +09:30

links.py

feat: add show_filters_icon property to Link for controlling Web UI filter icon display

2026-05-23 16:57:39 +08:00

llm_model_configs.py

feat(llm): hide api_key from all API responses and document max_tokens as reserved

2026-03-14 13:12:22 +08:00

nodes.py

Use lists for tags instead of dicts

2026-02-23 23:26:42 +08:00

pools.py

DB and API for resource pools

2023-09-07 17:31:11 +07:00

projects.py

feat: Node file streaming, recursive listing, file type detection, and file delete

2026-06-09 22:52:50 +08:00

rbac.py

Add required privileges to all endpoints

2023-09-02 17:54:24 +07:00

snapshots.py

Fix snapshots after merging

2026-04-11 19:54:49 +08:00

tokens.py

Add stateless JWT refresh token mechanism

2026-06-23 22:39:11 +08:00

topology.py

Add 'created_by' field to track project creator

2026-02-21 22:15:21 +01:00

users.py

Require minimum 8 characters for passwords

2025-02-23 12:05:19 +10:00