bckelley/cgm-remote-monitor
1
0
Fork 0
mirror of https://github.com/bckelley/cgm-remote-monitor.git synced 2026-08-24 03:14:12 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add comprehensive authorization and security documentation and test specifications

Browse Source 
Introduces `authorization-security-spec.md` and `authorization-test-spec.md` to document API authentication requirements (API_SECRET, JWT, Shiro permissions, brute-force protection) and their corresponding test cases, including identification of coverage gaps.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 055897c4-83a5-4136-93d8-ff61ec1a77a8
Replit-Commit-Checkpoint-Type: intermediate_checkpoint
Replit-Commit-Event-Id: 48221946-c783-44b0-a3b8-0be79161ef82
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
bewest
2026-01-19 13:14:21 -08:00
committed by Ben West
parent 22fefd5456
commit f329ec084c
3 changed files with 977 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
replit.md
+3
View File
@@ -215,7 +215,9 @@ Located in `docs/requirements/` and `docs/test-specs/`:
|----------|-------------|
| `requirements/data-shape-requirements.md` | Formal requirements for single vs array input handling |
| `requirements/api-v1-compatibility-spec.md` | Client compatibility requirements (AAPS, Loop, xDrip) |
| `requirements/authorization-security-spec.md` | Auth requirements: API_SECRET, JWT, Shiro permissions, brute-force protection |
| `test-specs/shape-handling-test-spec.md` | Test case specifications with requirement traceability |
| `test-specs/authorization-test-spec.md` | Security test cases mapped to auth requirements, coverage gaps identified |
## Comprehensive System Audit Documentation
@@ -290,6 +292,7 @@ Located in `docs/`:
- All changes preserve backward compatibility with single-object inputs
## Recent Changes
- 2026-01-15: Added authorization-security-spec.md and authorization-test-spec.md with formal requirements and test traceability for auth subsystem
- 2026-01-15: Fixed devicestatus.js race condition and WebSocket array handling for MongoDB 5.x compatibility
- 2026-01-15: Added comprehensive shape-handling test suite (38 tests) for multi-document write validation
- 2026-01-13: Updated audit docs with accurate rate limiting info (delaylist.js) and OIDC/gateway architecture direction