P1.6: secure guest invitation tokens (secrets.token_urlsafe + SHA-256 hash + one-time use + session revocation)

This commit is contained in:
Agent Zero
2026-07-29 12:30:00 +02:00
parent 26bf8d3a31
commit 8539a6402c
4 changed files with 186 additions and 44 deletions
+2
View File
@@ -12,6 +12,7 @@ from app.models.contact_folder_permission import ContactFolderPermission
from app.models.contact_merge import ContactMergeHistory
from app.models.entity_permission import EntityPermission
from app.models.guest_user import GuestUser
from app.models.guest_invitation import GuestInvitation
from app.models.entity_policy import EntityPolicy
from app.models.permission_template import PermissionTemplate
from app.models.permission_delegation import PermissionDelegation
@@ -55,6 +56,7 @@ __all__ = [
"ContactFolderPermission",
"ContactMergeHistory",
"EntityPermission",
"GuestInvitation",
"GuestUser",
"PermissionDelegation",
"PermissionTemplate",