GitLab

Endpoint role-checking was redundantly applied but FastAPI provides a nice abstraction mechanic...so I applied it. There should be no logical changes in this code; only simpler, cleaner ways for doing the same thing.

admin only

This way the random secret is created on first run instead of docker build. We don't really want all standard imaages to share a password anymore than we want a static password.

Even though "User.email" is enforced as unique at signup, it is not a unique field in the database. Let's use "User.id" instead. This also makes it more difficult to do a session stealing attack.

Default docker installations should generate a random key instead of using a static secret that everyone can see.

Start by renaming variables to something more generic. This will give us a bit more flexibility as we look to other session management mechanisms.

Replace the shell with the uvicorn process, so it becomes PID 1 and receives the signals directly