SIP_GoldBees_Backend

History

Thigazhezhilan J 4922ea69e8 Fix auto-login OAuth context not being established

Root cause: X-Kite-Version header on web login endpoints caused Zerodha
to return plain profile response instead of OAuth redirect_url.

Changes:
- Remove X-Kite-Version from session headers (only valid for Kite Connect API)
- Use allow_redirects=False on connect/login GET to preserve OAuth cookie
- Add Referer header to login/twofa POSTs
- Check data.redirect_url in twofa JSON body (modern Zerodha SPA behavior)
- Keep Location header fallback for legacy behavior

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-25 21:42:25 +05:30

app

Fix auto-login OAuth context not being established

2026-05-25 21:42:25 +05:30

migrations

Add live equity snapshots and improve broker handling

2026-03-25 23:33:09 +05:30

tests

Make engine event payloads JSON safe

2026-04-15 09:54:35 +05:30

.env.example

Fix reconnect broker: share session cookie across subdomains