farhadh ce88b0b432 refactor(session): store user ID in session instead of full struct ...

Replaces storing the full User object in the session cookie with just
the user ID. GetLoginUser now re-fetches the user from the database on
every request so credential/permission changes take effect immediately
without requiring a re-login. Includes a backward-compatible migration
path for existing sessions that still carry the old struct payload.

2026-05-11 21:16:22 +02:00

..

csrf.go

Implement CSRF protection and security hardening across the application (#4179)

2026-05-07 23:36:11 +02:00

session_test.go

refactor(session): store user ID in session instead of full struct

2026-05-11 21:16:22 +02:00

session.go

refactor(session): store user ID in session instead of full struct

2026-05-11 21:16:22 +02:00