Barcode Betty 3745f5be69 fix(auth): parse compound Better-Auth cookie/bearer token to extract token part ...

Better-Auth sets the session cookie as "token.sessionId". The DB stores
only the token part, so passing the full compound value caused 401s.

Splits on "." for both cookie and Bearer paths.

Tests added for compound cookie, raw token cookie (regression), and
compound Bearer token.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-04 20:32:43 +00:00

..

test_auth

fix(auth): parse compound Better-Auth cookie/bearer token to extract token part

2026-04-04 20:32:43 +00:00

test_e2e

fix: correct email-in-address format, remove dead code, update tests (#110)

2026-04-03 13:34:21 +00:00

test_middleware

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00

test_routes

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00

test_services

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

__init__.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

conftest.py

fix(api): revert SHA-256 session token hashing — better-auth stores raw tokens

2026-04-04 19:21:26 +00:00

test_config.py

fix(api): accept DATABASE_URL as fallback for shared DB with auth service

2026-04-04 19:52:24 +00:00

test_encrypted_json.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

test_models.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

test_openapi.py

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00