admin 7838c49721 feat(auth): harden sessions + HA Ingress support ...

- backend: settings SESSION_COOKIE_SECURE + TRUSTED_NETWORK_AUTO_AUTH,
  require_session uses secrets.compare_digest and respects trusted-network
  opt-in, main.py adds require_family_session middleware gating all /api/
  routes except auth/admin/email-vote-token paths
- docker-compose: pass SESSION_COOKIE_SECURE + TRUSTED_NETWORK_AUTO_AUTH
  through to backend + scheduler (fixes env-file changes not reaching runtime)
- frontend: Ingress path-prefix support (APP_BASE_PATH, BrowserRouter basename,
  vite base './'), Login redirect honors APP_BASE_PATH
- nginx: no-cache headers on root + /assets/
- docs: Home Assistant Ingress install/troubleshooting + plan file
- tests: test_auth expects 401 on no-session GET

Defaults: SESSION_COOKIE_SECURE=false, TRUSTED_NETWORK_AUTO_AUTH=true
(HA is the auth boundary; MealPlanner must not be port-forwarded directly).

2026-06-30 16:11:33 -07:00

..

fixtures/lucky_ca

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

__init__.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

conftest.py

feat: feedback-driven recipe discovery (auto-ingest via Spoonacular)

2026-05-24 13:17:39 -07:00

test_alembic.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

test_approval.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

test_auth.py

feat(auth): harden sessions + HA Ingress support

2026-06-30 16:11:33 -07:00

test_config.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

test_email_backend.py

tests: fix suite-wide collection and failures

2026-05-18 17:43:30 -07:00

test_feedback_analyzer.py

feat: feedback-driven recipe discovery (auto-ingest via Spoonacular)

2026-05-24 13:17:39 -07:00

test_ingredient_api.py

feat: manual match pin/unpin endpoints

2026-05-06 06:24:17 -07:00

test_ingredient_schema.py

feat: add IngredientCreate/Update/Read and IngredientGroceryMatchRead schemas

2026-05-05 20:48:49 -07:00

test_match_hook.py

feat: run matcher after successful scrape; failures don't flip scrape status

2026-05-06 06:21:54 -07:00

test_meal_pairings.py

feat(meals): suggest complementary sides

2026-06-29 14:59:30 -07:00

test_meal_plan_generate_api.py

feat: POST /api/admin/meal-plans/generate + regenerate + get endpoints

2026-05-06 09:15:16 -07:00

test_never_suggest_api.py

feat: never-suggest CRUD endpoints (ingredient and recipe blocklist)

2026-05-06 06:26:16 -07:00

test_orchestrator.py

fix: test-email actually sends; vote page pre-checks existing votes; lowercase MealPlanItemStatus everywhere

2026-05-14 12:17:44 -07:00

test_planner_cost.py

feat(backend): implement unit conversion for cost calculation

2026-05-24 13:46:50 -07:00

test_planner_filter.py

feat: planner hard-constraint filter for the 6 spec constraints

2026-05-06 06:42:49 -07:00

test_planner_generate.py

feat: planner orchestrator - load, filter, score, select, persist

2026-05-06 09:11:53 -07:00

test_planner_score.py

feat: planner per-recipe scoring with 5 weighted signals

2026-05-06 06:44:58 -07:00

test_planner_select.py

tests: fix suite-wide collection and failures

2026-05-18 17:43:30 -07:00

test_recipe_api.py

feat: recipe CRUD endpoints with canonical ingredient validation

2026-05-06 06:14:37 -07:00

test_recipe_discovery_ingestion.py

feat: feedback-driven recipe discovery (auto-ingest via Spoonacular)

2026-05-24 13:17:39 -07:00

test_recipe_schema.py

feat: add RecipeCreate/Update/Read schemas with canonical ingredient refs

2026-05-05 20:50:07 -07:00

test_resolve_ingredient.py

feat: POST /api/admin/recipes/resolve-ingredient with rapidfuzz top-3

2026-05-06 06:16:29 -07:00

test_scrape_endpoint.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

test_smoke.py

feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

2026-05-05 14:08:19 -07:00

test_swiftly_api.py

feat: AM-2 wire swiftly_auth.get_token() into LuckyCaliforniaScraper

2026-05-06 15:27:37 -07:00

test_swiftly_auth.py

feat: AM-1 swiftly_auth module — Firebase REST anon-signUp + process cache

2026-05-06 15:19:30 -07:00

test_thin_phase4_smoke.py

docs: thin phase 4 complete; refresh ORIENTATION + HANDOFF

2026-05-06 06:36:36 -07:00

test_units.py

feat(backend): implement unit conversion for cost calculation

2026-05-24 13:46:50 -07:00