copilot-swe-agent[bot] 4c040f2c58 fix(security): validate session tokens against database ... - Add sessions table to store session tokens with expiration - Create Session domain model and SessionRepository trait - Implement SqlSessionRepository for session persistence - Update is_authenticated() to validate tokens against database - Sessions expire after 30 days - Session tokens hashed with SHA-256 before storage - Delete sessions from database on logout - Update all page handlers to properly validate sessions This prevents session hijacking by ensuring only valid, unexpired tokens stored in the database can authenticate requests. Co-authored-by: jnsgruk <668505+jnsgruk@users.noreply.github.com>		2025-11-25 16:28:48 +00:00
..
0001_init.sql	feat: bootstrap brewlog platform	2025-11-24 11:44:12 +00:00
0002_auth.sql	feat(domain): add auth database schema and domain models	2025-11-25 16:27:51 +00:00
0003_sessions.sql	fix(security): validate session tokens against database	2025-11-25 16:28:48 +00:00