78c013e8b7
credo fixes
2026-06-16 09:56:51 -05:00
5bb55180a7
Fix all mix credo --strict and compiler warnings
2026-06-13 15:45:09 -05:00
095c5d3236
fix: M1 — prevent cross-org resource existence probing via scoped fetch
...
Use Repo.get_by(schema, id: id, organization_id: organization_id) instead of
Repo.get + pattern match so that resources from wrong orgs return :not_found
instead of :forbidden, preventing org membership discovery.
2026-05-12 13:44:19 -05:00
91dd7ad985
fix: allow site_id on device create regardless of use_sites setting
...
The API was silently stripping site_id when use_sites was false, causing
the Terraform provider to report inconsistent state after apply.
2026-02-15 12:28:06 -06:00
2911a3c17d
test fixes
2026-02-09 15:30:52 -06:00
8ee39a2d36
Add comprehensive tests for API authentication and authorization
...
Implemented tests for critical security modules with significant coverage improvements:
- ApiAuth plug: 0% → 100% (12 tests)
- Permissions module: 0% → 85% (32 tests)
- Devices API controller: 0% → 95% (22 tests)
Enhanced test fixtures to support membership roles and device creation with proper organization scoping.
2026-02-05 16:39:01 -06:00
