fb06ae00c1
Harden config export/import validation
2026-02-04 12:18:40 +00:00
0c1ff9da7f
Reject invalid pulse_url in setup script
2026-02-04 12:16:20 +00:00
4298d87485
Allow setup token via query param for SSH endpoints
2026-02-04 12:15:22 +00:00
3f51dbb7de
Assert security status auth token handling
2026-02-04 12:13:48 +00:00
77f23b35f7
Validate setup script input sanitization
2026-02-04 12:12:13 +00:00
f8c4a28600
Guard SSH key generation in containers
2026-02-04 12:10:10 +00:00
8313d66e64
Ensure public endpoints stay public in API mode
2026-02-04 12:06:50 +00:00
1fddbec07f
Ensure public download endpoints bypass auth
2026-02-04 12:05:32 +00:00
a49fa8514a
Cover OIDC callback public access
2026-02-04 12:03:56 +00:00
11e28689b2
Cover public setup script access
2026-02-04 12:02:27 +00:00
b57fdd2085
Add path traversal regression tests
2026-02-04 12:00:54 +00:00
f707e0ad40
Add audit auth regression checks
2026-02-04 11:59:48 +00:00
9f1877116b
Verify security status bootstrap token exposure
2026-02-04 11:58:02 +00:00
e0e4d24428
Cover setup token access for SSH endpoints
2026-02-04 11:56:16 +00:00
f9489db9e0
Add public endpoint regression coverage
2026-02-04 11:52:15 +00:00
d0e0a85861
Cover RBAC trailing slash routes
2026-02-04 11:40:23 +00:00
fd108faa7d
feat(profiles): de-emphasize AI suggestions and fix multi-tenant support
...
UI/UX Improvements for AI-skeptical users:
- Only show 'Ideas' button if AI is enabled AND configured
- Renamed 'Suggest Profile' to 'Ideas' with lightbulb icon
- Moved 'New Profile' button to primary position
- Changed AI button styling from prominent purple to subtle gray
- Updated modal title to 'Profile Ideas' with neutral language
Multi-tenant bug fix:
- ProfileSuggestionHandler now uses MultiTenantPersistence
- Properly resolves tenant-specific persistence from request context
- Fixes potential nil pointer panic in multi-tenant deployments
- Existing profiles are now correctly loaded per-tenant for AI context
Tests updated to use MultiTenantPersistence with org context injection.
2026-02-04 11:39:50 +00:00
a73352a396
Add recovery endpoint regression test
2026-02-04 11:39:30 +00:00
aa61c8edc5
Add quick setup and token auth regression tests
2026-02-04 11:38:09 +00:00
0c4b19ddf4
Add SSH security regression coverage
2026-02-04 11:36:11 +00:00
06df067cd7
Cover apply-restart auth guards
2026-02-04 11:30:37 +00:00
a9dc469de7
Add permission denial regression tests
2026-02-04 11:28:09 +00:00
a2b8b21ada
Fix rate limit flake in config export/import tests
2026-02-04 11:23:12 +00:00
ee5931ac7d
test: extend admin proxy and reset lockout auth coverage
2026-02-04 11:16:53 +00:00
df4ae9d639
test: deny non-admin proxy users on admin endpoints
2026-02-04 11:14:53 +00:00
65a0b7a0e4
test: cover change-password and public export/import guards
2026-02-04 11:12:54 +00:00
5553214256
test: require auth for license status
2026-02-04 11:08:21 +00:00
ed0f85149d
test: require auth for logs and update status
2026-02-04 11:00:46 +00:00
ae58e16525
test: include /api/config in monitoring read coverage
2026-02-04 11:00:03 +00:00
764805b0b9
test: require auth for auto-register
2026-02-04 10:59:24 +00:00
d6172b9a86
test: require auth for config export/import in api mode
2026-02-04 10:57:14 +00:00
47a4dc01cf
test: require auth for ai status, license features, scheduler health
2026-02-04 10:56:17 +00:00
5850ddf584
test: enforce proxy admin for config export/import and notifications
2026-02-04 10:54:51 +00:00
83311cdf8c
test: require settings:write for ai patrol autonomy update
2026-02-04 10:48:56 +00:00
32426aa6ca
test: license gate audit verify endpoint
2026-02-04 10:48:11 +00:00
f8b495c54c
test: enforce scope on security token endpoints
2026-02-04 10:47:36 +00:00
0a26ef622a
test: license gate audit webhook endpoint
2026-02-04 10:46:53 +00:00
1fdb96db1f
test: require settings scopes for config export/import
2026-02-04 10:46:19 +00:00
f8a8affe26
test: enforce license gating for enterprise endpoints
2026-02-04 10:42:44 +00:00
a6e1b7f6ee
test: require license for audit and reporting
2026-02-04 10:42:00 +00:00
71440c9521
test: require host:manage for host config patch
2026-02-04 10:40:58 +00:00
ac006ff5b9
test: require ai:chat scope for chat endpoints
2026-02-04 10:40:19 +00:00
563f4893fb
test: guard ai settings endpoints by scope
2026-02-04 10:39:28 +00:00
86b75c9e7c
test: enforce monitoring:write for metadata mutations
2026-02-04 10:38:48 +00:00
9409969ddd
test: require monitoring:read for core data endpoints
2026-02-04 10:37:53 +00:00
8ed47b8971
test: enforce agent scope checks
2026-02-04 10:37:06 +00:00
37f909c6dd
test: guard discovery endpoints by scope
2026-02-04 10:35:43 +00:00
ad21be68f3
test: enforce settings:write for config node mutations
2026-02-04 10:34:41 +00:00
ead8eb7087
test: require ai:execute scope on more ai endpoints
2026-02-04 10:33:53 +00:00
c68e386d01
test: cover ai patrol and run-command scopes
2026-02-04 10:32:05 +00:00
rcourtman