prop/lib/microwaveprop_web/controllers/api/v1
Graham McIntire 0704253af8
fix(security,test): viewer-aware profile queries + create_contact ordering + valkey test isolation
- /u/:callsign profile no longer leaks private contacts or pending beacons;
  Radio.list_contacts_for_user/2 and Beacons.list_beacons_for_user/2 now
  filter by viewer (owner/admin see everything, others see only public).
- Radio.create_contact/2 places user_id on the struct before
  submission_changeset so validate_user_or_email/1 accepts authenticated
  submissions that omit submitter_email.
- valkey_test.exs runs async: false; its setup mutates global Application
  env and Process registry, which otherwise crashed concurrent ConnCase
  GridCache.clear/0 calls (Mox.UnexpectedCallError on SCAN).
2026-05-12 08:49:08 -05:00
..
auth_controller.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
beacon_controller.ex fix(security,perf): address 9 audit findings (access control, DoS, crashes) 2026-05-11 18:53:21 -05:00
beacon_json.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
beacon_monitor_json.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
contact_controller.ex fix(security,perf): address 9 audit findings (access control, DoS, crashes) 2026-05-11 18:53:21 -05:00
contact_json.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
me_controller.ex fix(security,test): viewer-aware profile queries + create_contact ordering + valkey test isolation 2026-05-12 08:49:08 -05:00
profile_controller.ex fix(security,test): viewer-aware profile queries + create_contact ordering + valkey test isolation 2026-05-12 08:49:08 -05:00
score_controller.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
token_json.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
user_json.ex feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00