galaxis-po

History

머니페니 98a161574e security: migrate JWT from localStorage to httpOnly cookie

Eliminates XSS token theft by storing JWT in httpOnly Secure cookie
instead of localStorage. Backend sets cookie on login and clears on
logout. Token extraction uses cookie-first with Authorization header
fallback for backward compatibility with existing tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-18 22:30:47 +09:00

alembic

perf: add DB performance indexes and fix N+1 query in backtest listing

2026-03-18 22:20:29 +09:00

app

security: migrate JWT from localStorage to httpOnly cookie

2026-03-18 22:30:47 +09:00

jobs

feat: wire KJB into backtest worker, add Signal API, add scheduler job

2026-02-19 15:16:13 +09:00

scripts

fix: use actual invested amounts for avg_price in seed data