rcourtman 0dfe3d16b3 security: secure socket.io, test-notification, and stats endpoints ...

1. Secure /socket.io/ endpoint
   - Previously allowed unauthenticated WebSocket upgrades via transport=websocket
   - Now enforces CheckAuth() before upgrade

2. Secure /api/test-notification
   - Previously unauthenticated and allowed broadcasting to all clients
   - Now requires Admin + settings:write scope

3. Secure /simple-stats
   - Added authentication requirement (was public)

2026-02-03 20:08:16 +00:00

..

agentbinaries

chore: reliability and maintenance improvements

2026-01-22 00:45:04 +00:00

agentexec

fix: Allow qm/pct reboot/shutdown commands with approval

2026-01-04 17:57:51 +00:00

agentupdate

Refactor: Core monitoring and update managers multi-tenancy

2026-01-22 16:43:24 +00:00

ai

security: add scope checks to AI Patrol and agent profile endpoints

2026-02-03 19:29:56 +00:00

alerts

Fix multi-tenant persistence and backend stability

2026-02-03 16:24:42 +00:00

api

security: secure socket.io, test-notification, and stats endpoints

2026-02-03 20:08:16 +00:00

buffer

Fix offline buffering: add tests, remove unused config, fix flaky test

2025-12-02 22:31:44 +00:00

ceph

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

config

security: fix high severity authz issues (AI chat, patrol autonomy, discovery, host config)

2026-02-03 19:00:56 +00:00

crypto

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

discovery

fix: Update runtime config when toggling Docker update actions setting

2026-01-03 11:14:17 +00:00

dockeragent

fix: env overrides and OS-aware test improvements

2026-01-22 13:49:05 +00:00

errors

refactor: Remove unreachable dead code branches

2025-12-02 14:48:57 +00:00

hostagent

fix(agent): grant PVEDatastoreAdmin for backup visibility

2026-02-03 19:11:25 +00:00

hostmetrics

fix: ZFS pool usage now includes zvols and all pool consumers

2026-01-29 12:08:38 +00:00

infradiscovery

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

kubernetesagent

test: expand backend coverage

2026-01-25 21:08:44 +00:00

license

feat(license): implement free Patrol / pro Auto-Fix tiering strategy

2026-02-01 16:27:10 +00:00

logging

fix: address linting issues and test adjustments

2026-02-01 23:27:11 +00:00

mdadm

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

metrics

test: expand backend coverage

2026-01-25 21:08:44 +00:00

mock

feat(kubernetes): Add Kubernetes mock data and UI

2025-12-12 23:13:40 +00:00

models

Update core infrastructure components

2026-01-28 16:52:35 +00:00

monitoring

security: add scope checks to AI Patrol and agent profile endpoints

2026-02-03 19:29:56 +00:00

notifications

fix: address 6 security and reliability issues

2026-02-03 17:32:44 +00:00

remoteconfig

test: expand backend coverage

2026-01-25 21:08:44 +00:00

resources

fix: Add nil checks in findDuplicate() to prevent crash. Related to #1119

2026-01-18 13:41:00 +00:00

sensors

test: expand backend coverage

2026-01-25 21:08:44 +00:00

servicediscovery

security: add scope checks to alerts, AI models, patrol status/stream, and remaining AI endpoints

2026-02-03 19:48:43 +00:00

smartctl

feat: PULSE_DISK_EXCLUDE now applies to SMART monitoring. Related to #983

2025-12-31 23:07:01 +00:00

ssh/knownhosts

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

system

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

types

test: add unit tests for types package

2025-11-26 14:10:21 +00:00

updatedetection

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

updates

fix: SSE race conditions, alert user spoofing, and security status oracle

2026-02-03 17:40:58 +00:00

utils

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

websocket

security: add scope checks to AI endpoints and mitigate CSWSH

2026-02-03 19:40:46 +00:00