8 Commits

Include renames

Author	SHA1	Message	Date
Andy Low	69b620dd2f	Harden MongoDB driver compatibility	2026-04-19 23:24:22 +01:00
Ben West	93945b749e	ensure auth tests have a proper delay set ... It needs a small delay to test with.	2026-01-19 18:50:11 -08:00
bewest	a55df96d80	Improve security test performance by fixing authorization delay calculation ... Fix logic in delay list initialization to correctly handle zero-value settings for authorization failure delays, and update test configurations to leverage this fix. Replit-Commit-Author: Agent Replit-Commit-Session-Id: 605cec52-e52a-4520-8af0-466d9c971344 Replit-Commit-Checkpoint-Type: intermediate_checkpoint Replit-Commit-Event-Id: ee25d747-8c3a-444e-8dbf-e0229eee7d31 Replit-Helium-Checkpoint-Created: true	2026-01-20 01:48:56 +00:00
4 people	ac1a7d1bd8	Api3 remove auth token (#6863) ... * APIv3: removing authorization by accessToken from codebase and adjusting tests * APIv3: updating docs --------- Co-authored-by: Petr Ondrůšek <petr.ondrusek@okin.eu> Co-authored-by: Sulka Haro <sulka@sulka.net>	2023-02-18 16:12:47 +02:00
Sulka HaroandGitHub	4e1f36489e	Fix loading JWT when auth subject has no permissions (#7894) ... * Fix an issue reported by Milos, when a JWT is loaded with a subject that has no permissions * Add unit test to cover this case	2023-02-18 10:26:56 +02:00
Sulka Haro	c65916c256	* Fix #6843 ... * Don't do sync file access on requests to swagger files or service worker * Adds an API test	2021-02-04 21:46:30 +02:00
Sulka HaroandGitHub	d7e011d8f5	Refactoring organisation, bundling and security improvements (#6765) ... * * Simplified bundling to just one bundle * Removed cache invalidation token from bundling * Generate strong persistent random string on deploy to use for JWT signing * WIP: moving api-secret and JWT signing to a separate centralized security component * Moved some server components away from project root * Fix issues reported by linter * Ignore detect-object-injection everywhere but the client * Make admin message button red * Remove alarms for some security alerts on code * api_secret is now fully contained in the enclave	2021-02-02 19:53:30 +02:00
Sulka Haro	46e4d172bb	* Additional unit test for the authorization API ... * Stop logging the API SECRET	2021-01-04 23:43:16 +02:00