ce9481e7bf
Inventory frontend and static auth bypasses
2026-02-04 13:20:45 +00:00
d1f602c93b
Validate public allowlist backing
2026-02-04 13:18:29 +00:00
41c10e60d7
Add auth bypass inventory coverage
2026-02-04 13:16:29 +00:00
fc9c2b2477
Add public paths inventory test
2026-02-04 13:05:12 +00:00
75710338a3
Add CSRF skip allowlist test
2026-02-04 13:01:00 +00:00
3c9a0ebc58
Cover apply-restart CSRF skip
2026-02-04 12:58:12 +00:00
49a570b574
Track bare routes in inventory test
2026-02-04 12:55:59 +00:00
8ddcbf8c62
Add router route inventory test
2026-02-04 12:49:22 +00:00
8951b6f7f9
Require monitoring scope for socket.io
2026-02-04 12:41:12 +00:00
216ccf0be5
Require auth for socket.io js
2026-02-04 12:39:19 +00:00
63a846cf3b
Allow bearer tokens for websocket auth
2026-02-04 12:37:46 +00:00
18ed23504d
Harden encoded path traversal coverage
2026-02-04 12:36:44 +00:00
36f1504355
Cover bearer token auth for stats
2026-02-04 12:34:47 +00:00
e23a2a793b
Cover socket.io query token auth
2026-02-04 12:32:30 +00:00
7fc9a98c47
Cover websocket query token auth
2026-02-04 12:25:25 +00:00
df08e45993
Require passphrase for config export/import
2026-02-04 12:19:53 +00:00
fb06ae00c1
Harden config export/import validation
2026-02-04 12:18:40 +00:00
0c1ff9da7f
Reject invalid pulse_url in setup script
2026-02-04 12:16:20 +00:00
4298d87485
Allow setup token via query param for SSH endpoints
2026-02-04 12:15:22 +00:00
3f51dbb7de
Assert security status auth token handling
2026-02-04 12:13:48 +00:00
77f23b35f7
Validate setup script input sanitization
2026-02-04 12:12:13 +00:00
f8c4a28600
Guard SSH key generation in containers
2026-02-04 12:10:10 +00:00
8313d66e64
Ensure public endpoints stay public in API mode
2026-02-04 12:06:50 +00:00
1fddbec07f
Ensure public download endpoints bypass auth
2026-02-04 12:05:32 +00:00
a49fa8514a
Cover OIDC callback public access
2026-02-04 12:03:56 +00:00
11e28689b2
Cover public setup script access
2026-02-04 12:02:27 +00:00
b57fdd2085
Add path traversal regression tests
2026-02-04 12:00:54 +00:00
f707e0ad40
Add audit auth regression checks
2026-02-04 11:59:48 +00:00
9f1877116b
Verify security status bootstrap token exposure
2026-02-04 11:58:02 +00:00
e0e4d24428
Cover setup token access for SSH endpoints
2026-02-04 11:56:16 +00:00
f9489db9e0
Add public endpoint regression coverage
2026-02-04 11:52:15 +00:00
d0e0a85861
Cover RBAC trailing slash routes
2026-02-04 11:40:23 +00:00
fd108faa7d
feat(profiles): de-emphasize AI suggestions and fix multi-tenant support
...
UI/UX Improvements for AI-skeptical users:
- Only show 'Ideas' button if AI is enabled AND configured
- Renamed 'Suggest Profile' to 'Ideas' with lightbulb icon
- Moved 'New Profile' button to primary position
- Changed AI button styling from prominent purple to subtle gray
- Updated modal title to 'Profile Ideas' with neutral language
Multi-tenant bug fix:
- ProfileSuggestionHandler now uses MultiTenantPersistence
- Properly resolves tenant-specific persistence from request context
- Fixes potential nil pointer panic in multi-tenant deployments
- Existing profiles are now correctly loaded per-tenant for AI context
Tests updated to use MultiTenantPersistence with org context injection.
2026-02-04 11:39:50 +00:00
a73352a396
Add recovery endpoint regression test
2026-02-04 11:39:30 +00:00
aa61c8edc5
Add quick setup and token auth regression tests
2026-02-04 11:38:09 +00:00
0c4b19ddf4
Add SSH security regression coverage
2026-02-04 11:36:11 +00:00
06df067cd7
Cover apply-restart auth guards
2026-02-04 11:30:37 +00:00
a9dc469de7
Add permission denial regression tests
2026-02-04 11:28:09 +00:00
a2b8b21ada
Fix rate limit flake in config export/import tests
2026-02-04 11:23:12 +00:00
ee5931ac7d
test: extend admin proxy and reset lockout auth coverage
2026-02-04 11:16:53 +00:00
df4ae9d639
test: deny non-admin proxy users on admin endpoints
2026-02-04 11:14:53 +00:00
65a0b7a0e4
test: cover change-password and public export/import guards
2026-02-04 11:12:54 +00:00
5553214256
test: require auth for license status
2026-02-04 11:08:21 +00:00
ed0f85149d
test: require auth for logs and update status
2026-02-04 11:00:46 +00:00
ae58e16525
test: include /api/config in monitoring read coverage
2026-02-04 11:00:03 +00:00
764805b0b9
test: require auth for auto-register
2026-02-04 10:59:24 +00:00
d6172b9a86
test: require auth for config export/import in api mode
2026-02-04 10:57:14 +00:00
47a4dc01cf
test: require auth for ai status, license features, scheduler health
2026-02-04 10:56:17 +00:00
5850ddf584
test: enforce proxy admin for config export/import and notifications
2026-02-04 10:54:51 +00:00
83311cdf8c
test: require settings:write for ai patrol autonomy update
2026-02-04 10:48:56 +00:00
rcourtman