CartSnitch Engineer Bot 183f6f5f8c fix(api): parse signed session cookie instead of SHA-256 hashing ...

Better-Auth v1.5.6 stores raw tokens in sessions.token, not SHA-256
hashes. The session cookie is signed (rawToken.hmacSignature), so
strip the HMAC signature suffix before querying the DB.

Fixes 401 errors on all data endpoints caused by the incorrect hash.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-01 11:09:29 +00:00

alembic

fix: change users.id and FK columns from uuid to text for Better-Auth compatibility

2026-03-31 17:56:13 +00:00

src/cartsnitch_api

fix(api): parse signed session cookie instead of SHA-256 hashing

2026-04-01 11:09:29 +00:00

tests

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

.dockerignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

.gitignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

alembic.ini

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

CLAUDE.md

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

Dockerfile

fix(api): run Alembic migrations on startup (#90)

2026-03-31 21:55:00 +00:00

pyproject.toml

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

renovate.json

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

S

Description

CartSnitch API gateway — frontend-facing REST API

266 KiB

Languages

Python 99.4%

Dockerfile 0.4%

Mako 0.2%