CartSnitch Engineer Bot ec4d8f21a9 fix(api): hash session token before DB lookup to match Better-Auth storage ...

Better-Auth v1.5.6+ stores session tokens as SHA-256 hashes in the
sessions table. The raw token from the cookie was being queried directly,
causing all authenticated /api/v1/* requests to return 401.

Fixes CAR-313.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-01 02:09:55 +00:00

alembic

fix: change users.id and FK columns from uuid to text for Better-Auth compatibility

2026-03-31 17:56:13 +00:00

src/cartsnitch_api

fix(api): hash session token before DB lookup to match Better-Auth storage

2026-04-01 02:09:55 +00:00

tests

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

.dockerignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

.gitignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

alembic.ini

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

CLAUDE.md

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

Dockerfile

fix(api): run Alembic migrations on startup (#90)

2026-03-31 21:55:00 +00:00

pyproject.toml

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

renovate.json

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

S

Description

CartSnitch API gateway — frontend-facing REST API

266 KiB

Languages

Python 99.4%

Dockerfile 0.4%

Mako 0.2%