summercms

Author	SHA1	Message	Date
Jakub Zych	0953308e26	test(09-02): add failing tests for the backend auth lifecycle - Login does not stamp last_login and logout, refresh, and me are unmounted - Repeated logins are not throttled and auth events are not logged	2026-09-24 17:47:15 +02:00
Jakub Zych	06a7292dea	feat(09-02): implement exact backend identity migrations - Add the admin jti table, reset cutoff, and Winter indexes without AutoMigrate - Reapply the developer and publisher seed idempotently and allow repeated role codes	2026-09-24 17:40:34 +02:00
Jakub Zych	8c1de83f01	test(09-01): add failing audience crossover and authorization-order tests - Same-secret backend token is still accepted by the frontend guard - Permission denial must not invoke the schema or database callback - Admin error bodies must not echo secrets or raw tokens	2026-09-24 17:19:57 +02:00
Jakub Zych	dfa00f7e3a	feat(09-01): implement separate-admin genre list tracer - Audience-aware mint, verify, refresh, and backend guard keep frontend tokens compatible - Cabana mounts raw admin login, list schema, and record list behind admin.jwt.secret - Framework migration seeds Winter backend users and developer/publisher roles	2026-09-24 17:17:19 +02:00