Files
detections/.gitignore
T
Oleksandr Bezdieniezhnykh 097811a67b [AZ-178] Fix Critical/High security findings: auth, CVEs, non-root containers, per-job SSE
- Pin all deps; h11==0.16.0 (CVE-2025-43859), python-multipart>=1.3.1 (CVE-2026-28356), PyJWT==2.12.1
- Add HMAC JWT verification (require_auth FastAPI dependency, JWT_SECRET-gated)
- Fix TokenManager._refresh() to use ADMIN_API_URL instead of ANNOTATIONS_URL
- Rename POST /detect → POST /detect/image (image-only, rejects video files)
- Replace global SSE stream with per-job SSE: GET /detect/{media_id} with event replay buffer
- Apply require_auth to all 4 protected endpoints
- Fix on_annotation/on_status closure to use mutable current_id for correct post-upload event routing
- Add non-root appuser to Dockerfile and Dockerfile.gpu
- Add JWT_SECRET to e2e/docker-compose.test.yml and run-tests.sh
- Update all e2e tests and unit tests for new endpoints and HMAC token signing
- 64/64 tests pass

Made-with: Cursor
2026-04-02 06:32:12 +03:00

75 lines
861 B
Plaintext

.DS_Store
*.swp
*.swo
*~
Thumbs.db
# Cython generated
*.c
# Python
__pycache__/
*.py[cod]
*$py.class
*.so
*.egg-info/
*.egg
dist/
build/
.eggs/
*.whl
.venv/
venv/
env/
.env
.env.*
!.env.example
*.env.local
pip-log.txt
pip-delete-this-directory.txt
.mypy_cache/
.pytest_cache/
.ruff_cache/
htmlcov/
.coverage
.coverage.*
coverage.xml
*.cover
.hypothesis/
.tox/
# Binary / media / model files
*.onnx
*.mp4
*.avi
*.jpg
*.JPG
*.jpeg
*.png
*.mlpackage
*.mlmodel
# Standalone skill output (ephemeral, not part of project)
_standalone/
# MCP config with credentials (use .cursor/mcp.json.example as template)
.cursor/mcp.json
# E2E compose env
!e2e/.env
# E2E test artifacts
e2e/results/
e2e/logs/
!e2e/results/.gitkeep
!e2e/logs/.gitkeep
# Unit test artifacts (streaming buffer temp files)
data/
# Deployment state
.deploy-previous-tag
# Runtime logs
Logs/