Already implemented. SPARC/api.py uses slowapi with Limiter(key_func=get_remote_address). The /auth/register endpoint has @limiter.limit("5/minute") and /auth/login has `@limiter.limit(…
Already implemented. SPARC/database.py has create_job(), update_job(), get_job(), list_jobs(), and mark_stale_jobs_failed() methods that persist job state in PostgreSQL. The API…
Already implemented. SPARC/database.py DatabaseClient uses psycopg2.pool.ThreadedConnectionPool with configurable minconn/maxconn parameters and a get_conn() context manager that…
Already implemented. docker-compose.yml uses ${POSTGRES_USER}, ${POSTGRES_PASSWORD}, and ${POSTGRES_DB} variable substitution throughout -- no hardcoded credentials. .env is in…
Already implemented. SPARC/config.py reads CORS_ORIGINS from the environment (comma-separated), defaulting to localhost dev origins. The SPARC/api.py CORS middleware uses `config.cors_origins…
This is already implemented in the current codebase.
SPARC/auth.py contains check_jwt_secret() which raises RuntimeError when JWT_SECRET equals the default value and `APP_ENV !=…