feat(auth): single-admin password login (signed cookie) — gate tuning + Sources catalog, keep chat and document viewer public

2026-08-23 19:58:39 -04:00
parent fc0d9a2d5c
commit cbc263a4b2
46 changed files with 1555 additions and 691 deletions
@@ -19,6 +19,10 @@ dependencies = [
    # --- LLM client (OpenAI-compatible, self-hosted "aipi") ---
    "httpx>=0.27,<1.0",
    "openai>=1.40,<3.0",
+    # Phase 16: starlette's SessionMiddleware signs the session cookie with
+    # itsdangerous — an OPTIONAL starlette extra ("full") since starlette 1.x,
+    # so the app declares it directly (narrower than starlette[full]).
+    "itsdangerous>=2.2,<3.0",
 ]

 [dependency-groups]