머니페니 98a161574e security: migrate JWT from localStorage to httpOnly cookie ...

Eliminates XSS token theft by storing JWT in httpOnly Secure cookie
instead of localStorage. Backend sets cookie on login and clears on
logout. Token extraction uses cookie-first with Authorization header
fallback for backward compatibility with existing tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-18 22:30:47 +09:00

..

api

security: migrate JWT from localStorage to httpOnly cookie

2026-03-18 22:30:47 +09:00

core

fix: remove passlib dependency and fix FastAPI deprecation warnings

2026-02-08 22:34:32 +09:00

models

feat: add realized/unrealized PnL tracking and position sizing guide

2026-03-18 19:04:36 +09:00

schemas

feat: add DC pension ETF-only filter to strategy API

2026-03-18 20:57:47 +09:00

services

feat: add minimum trade amount filter to rebalancing calculation

2026-03-18 20:57:43 +09:00

__init__.py

feat: initialize project structure with backend and frontend scaffolding

2026-02-02 22:55:26 +09:00

main.py

feat: wire KJB into backtest worker, add Signal API, add scheduler job

2026-02-19 15:16:13 +09:00