Api-DataSentinel

5 Commits 2 Branches 0 Tags

2 Commits

Author	SHA1	Message	Date
neckfire	8563e6daac	feat(auth): JWT + RBAC, RGPD, sécurité (P0) Build & Deploy / build (push) Successful in 17s Details - auth.py: JWT (python-jose) + bcrypt (passlib), get_current_user, require_admin - endpoints protégés via APIRouter(dependencies=[get_current_user]); /health public - /auth/login (rate-limit 5/min) + /auth/me - /admin/users CRUD + reset-password + /admin/journal (require_admin) - RGPD: /me/data-export (portabilité) + DELETE /me (oubli/anonymisation) - en-têtes de sécurité, CORS tous verbes + credentials - requirements: python-jose, passlib[bcrypt], bcrypt 4.0.1, python-multipart, slowapi	2026-06-20 12:49:01 +02:00
neckfire	51d041c0da	ci: dockerise l'API + connexion DB et CORS configurables par env - config.py: connexion SQL via DB_* (driver 18, auth SQL), fallback Windows local - main.py: origines CORS via CORS_ORIGINS - Dockerfile (python 3.12 + msodbcsql18) + workflow Gitea Actions (build/push image)	2026-06-20 12:21:47 +02:00

Author

SHA1

Message

Date

neckfire

8563e6daac

feat(auth): JWT + RBAC, RGPD, sécurité (P0)

Build & Deploy / build (push) Successful in 17s

Details

- auth.py: JWT (python-jose) + bcrypt (passlib), get_current_user, require_admin
- endpoints protégés via APIRouter(dependencies=[get_current_user]); /health public
- /auth/login (rate-limit 5/min) + /auth/me
- /admin/users CRUD + reset-password + /admin/journal (require_admin)
- RGPD: /me/data-export (portabilité) + DELETE /me (oubli/anonymisation)
- en-têtes de sécurité, CORS tous verbes + credentials
- requirements: python-jose, passlib[bcrypt], bcrypt 4.0.1, python-multipart, slowapi

2026-06-20 12:49:01 +02:00

neckfire

51d041c0da

ci: dockerise l'API + connexion DB et CORS configurables par env

- config.py: connexion SQL via DB_* (driver 18, auth SQL), fallback Windows local
- main.py: origines CORS via CORS_ORIGINS
- Dockerfile (python 3.12 + msodbcsql18) + workflow Gitea Actions (build/push image)

2026-06-20 12:21:47 +02:00