YueGuobin d4389b7068

fix(rbac): guard None current_user on websocket auth failure ...

get_current_active_user_from_websocket returns None after closing the socket
on an auth failure (revoked token, bad credentials, inactive user).
has_privilege_on_websocket dereferenced current_user.is_superadmin without a
None check, so any websocket auth failure surfaced as an AttributeError
traceback instead of a clean close. Bail out early when current_user is None,
mirroring the guard already present in ws_console.

2026-07-16 00:51:45 +08:00

..

__init__.py

Refactor tests and start work on database integration.

2020-12-02 18:39:08 +10:30

authentication.py

Add stateless JWT refresh token mechanism

2026-06-23 22:39:11 +08:00

database.py

Remove unused imports (logging, log, select)

2026-06-16 22:25:07 +08:00

rbac.py

fix(rbac): guard None current_user on websocket auth failure

2026-07-16 00:51:45 +08:00