karrio-server 2026.1.3__py3-none-any.whl → 2026.1.5__py3-none-any.whl

karrio/server/VERSION

@@ -1 +1 @@
-2026.1.3
+2026.1.5

karrio/server/settings/base.py

@@ -513,6 +513,15 @@ SIMPLE_JWT = {
     "SLIDING_TOKEN_REFRESH_LIFETIME": timedelta(days=1),
 }
 
+# JWT Cookie settings for HTTP-only cookie authentication
+JWT_AUTH_COOKIE = config("JWT_AUTH_COOKIE", default="karrio_access_token")
+JWT_REFRESH_COOKIE = config("JWT_REFRESH_COOKIE", default="karrio_refresh_token")
+JWT_AUTH_COOKIE_SECURE = config(
+    "JWT_AUTH_COOKIE_SECURE", default=USE_HTTPS, cast=bool
+)
+JWT_AUTH_COOKIE_SAMESITE = config("JWT_AUTH_COOKIE_SAMESITE", default="Lax")
+JWT_AUTH_COOKIE_PATH = config("JWT_AUTH_COOKIE_PATH", default="/")
+
 # OAuth2 config
 OIDC_RSA_PRIVATE_KEY = config("OIDC_RSA_PRIVATE_KEY", default="").replace("\\n", "\n")
 OAUTH2_PROVIDER_APPLICATION_MODEL = "oauth2_provider.Application"

karrio/server/settings/cache.py

@@ -1,5 +1,6 @@
 # type: ignore
 import sys
+import socket
 from decouple import config
 from karrio.server.settings.base import *
 from karrio.server.settings.apm import HEALTH_CHECK_APPS
@@ -8,6 +9,10 @@ from karrio.server.core.logging import logger
 
 CACHE_TTL = 60 * 15
 
+# Health check cache key - make it unique per pod to avoid race conditions
+# Use hostname (pod name in k8s) as suffix to prevent conflicts between replicas
+HEALTHCHECK_CACHE_KEY = f"djangohealthcheck_{socket.gethostname()}"
+
 # Check if worker is running in detached mode (separate from API server)
 DETACHED_WORKER = config("DETACHED_WORKER", default=False, cast=bool)
 
@@ -32,7 +37,7 @@ if REDIS_URL is not None:
 
     # Extract values from REDIS_URL (these supersede granular env vars)
     REDIS_HOST = parsed.hostname
-    REDIS_PORT = parsed.port or 6379
+    REDIS_PORT = parsed.port or 10000  # Azure Managed Redis default port
     REDIS_USERNAME = parsed.username or "default"
     REDIS_PASSWORD = parsed.password
 
@@ -40,9 +45,10 @@ if REDIS_URL is not None:
     REDIS_SCHEME = parsed.scheme if parsed.scheme in ("redis", "rediss") else "redis"
     REDIS_SSL = REDIS_SCHEME == "rediss"
 
-    # Build connection URL with database 1 for cache
+    # Build connection URL for cache (use DB from URL path, default to 0)
+    REDIS_DB = parsed.path.lstrip("/") or "0"
     REDIS_AUTH = f"{REDIS_USERNAME}:{REDIS_PASSWORD}@" if REDIS_PASSWORD else ""
-    REDIS_CONNECTION_URL = f"{REDIS_SCHEME}://{REDIS_AUTH}{REDIS_HOST}:{REDIS_PORT}/1"
+    REDIS_CONNECTION_URL = f"{REDIS_SCHEME}://{REDIS_AUTH}{REDIS_HOST}:{REDIS_PORT}/{REDIS_DB}"
 
 else:
     # Fall back to individual parameters
@@ -52,10 +58,11 @@ else:
     REDIS_USERNAME = config("REDIS_USERNAME", default="default")
 
     if REDIS_HOST is not None:
+        REDIS_DB = config("REDIS_CACHE_DB", default="0")
         REDIS_AUTH = f"{REDIS_USERNAME}:{REDIS_PASSWORD}@" if REDIS_PASSWORD else ""
         REDIS_SCHEME = "rediss" if REDIS_SSL else "redis"
         REDIS_CONNECTION_URL = (
-            f'{REDIS_SCHEME}://{REDIS_AUTH}{REDIS_HOST}:{REDIS_PORT or "6379"}/1'
+            f'{REDIS_SCHEME}://{REDIS_AUTH}{REDIS_HOST}:{REDIS_PORT or "6379"}/{REDIS_DB}'
         )
 
 # Configure Django cache if Redis is available and not in worker mode

karrio/server/settings/workers.py

@@ -38,7 +38,7 @@ if REDIS_URL is not None:
 
     # Extract values from REDIS_URL (these supersede granular env vars)
     REDIS_HOST = parsed.hostname
-    REDIS_PORT = parsed.port or 6379
+    REDIS_PORT = parsed.port or 10000  # Azure Managed Redis default port
     REDIS_USERNAME = parsed.username or "default"
     REDIS_PASSWORD = parsed.password