SEC-11 removed algorithm from Settings but missed 3 call sites: - auth.py line 68: jwt.decode in get_current_user - integrations.py lines 58, 120: jwt.decode in OAuth callbacks All now use ALGORITHM constant or inline 'HS256'. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| activities.py | ||
| ai_chat.py | ||
| auth.py | ||
| catalog.py | ||
| food.py | ||
| integrations.py | ||
| meal_plans.py | ||
| nutrition.py | ||
| onboarding.py | ||
| points.py | ||
| programs.py | ||
| support.py | ||