Eventify Deploy 1b6185c758 security: fix SMTP credential exposure and auth bypass ...

- C-1: Move EMAIL_HOST_PASSWORD to os.environ (was hardcoded plaintext)
- C-2: Enable token-user cross-validation in validate_token_and_get_user()
  (compares token.user_id with user.id to prevent impersonation)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 19:29:42 +00:00

3.8 KiB

Raw Permalink Blame History

View Raw