Eventify Deploy 1b6185c758 security: fix SMTP credential exposure and auth bypass ...

- C-1: Move EMAIL_HOST_PASSWORD to os.environ (was hardcoded plaintext)
- C-2: Enable token-user cross-validation in validate_token_and_get_user()
  (compares token.user_id with user.id to prevent impersonation)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 19:29:42 +00:00

..

__init__.py

Initials

2025-11-27 11:53:46 +05:30

asgi.py

Initials

2025-11-27 11:53:46 +05:30

settings.py

security: fix SMTP credential exposure and auth bypass

2026-03-30 19:29:42 +00:00

urls.py

feat: add JWT auth foundation - /api/v1/ with admin login, refresh, me, health endpoints

2026-03-24 14:46:03 +00:00

wsgi.py

Initials

2025-11-27 11:53:46 +05:30