farhadh ce88b0b432 refactor(session): store user ID in session instead of full struct ... Replaces storing the full User object in the session cookie with just the user ID. GetLoginUser now re-fetches the user from the database on every request so credential/permission changes take effect immediately without requiring a re-login. Includes a backward-compatible migration path for existing sessions that still carry the old struct payload.		2026-05-11 21:16:22 +02:00
..
csrf.go	Implement CSRF protection and security hardening across the application (#4179)	2026-05-07 23:36:11 +02:00
session.go	refactor(session): store user ID in session instead of full struct	2026-05-11 21:16:22 +02:00
session_test.go	refactor(session): store user ID in session instead of full struct	2026-05-11 21:16:22 +02:00