From 96fad1a4e78c7209e5a0f3496e8b59d591fbe500 Mon Sep 17 00:00:00 2001 From: nsfisis Date: Sun, 15 Feb 2026 11:12:50 +0900 Subject: refactor(auth): replace JWT authentication with server-side sessions Migrate from stateless JWT tokens to server-side session management backed by PostgreSQL. Sessions are hashed with SHA-256 before storage, cleaned up periodically, and invalidated on logout. This removes the need for JWT_SECRET/COOKIE_SECRET environment variables and the golang-jwt dependency. Co-Authored-By: Claude Opus 4.6 --- .env.example | 2 -- 1 file changed, 2 deletions(-) (limited to '.env.example') diff --git a/.env.example b/.env.example index 216818e..6f176d9 100644 --- a/.env.example +++ b/.env.example @@ -1,3 +1 @@ ALBATROSS_BASE_PATH=/iosdc-japan/2025/code-battle/ -ALBATROSS_JWT_SECRET=[your_secret_key] -ALBATROSS_COOKIE_SECRET=[your_secret_key] -- cgit v1.3.1