7fa327aa27
- P1-1: CORS configuration security - use DEBUG mode to differentiate production vs development CORS settings - P1-2: Implement token refresh logic in RefreshTokenUseCase - Add get_session_by_refresh_token to SessionStore - Verify session validity and expiry - Generate new access token on refresh - P1-3: Fix database connection leak in worker ingest task - Add proper try-except-finally block - Ensure db.close() is always called - P1-4: Implement real media metadata extraction - Use ffprobe for video metadata - Use Pillow for image metadata - Return empty dict on failure (no mock data)