Skip to content

Improve production security defaults #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Improve production security defaults #3

wants to merge 1 commit into from

Conversation

@jaesuphwang
Copy link
Owner

@jaesuphwang jaesuphwang commented Jun 9, 2025

Summary

  • use RS256 as the default JWT algorithm
  • warn when insecure defaults are detected in Settings.validate_for_production
  • document the need to set strong secrets for production
  • ensure README ends with a newline

Testing

  • pytest -q (fails: unexpected SystemExit in simple_test.py)
  • python test_mcp_basic.py (fails: could not install mcp dependency)

https://chatgpt.com/codex/tasks/task_e_684544042b18832fa3a78b0efc1f1be8
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

codex

2 participants

@jaesuphwang