8ee39a2d36
Add comprehensive tests for API authentication and authorization
...
Implemented tests for critical security modules with significant coverage improvements:
- ApiAuth plug: 0% → 100% (12 tests)
- Permissions module: 0% → 85% (32 tests)
- Devices API controller: 0% → 95% (22 tests)
Enhanced test fixtures to support membership roles and device creation with proper organization scoping.
2026-02-05 16:39:01 -06:00
c93144cc37
snmp v3 support
2026-02-04 12:02:38 -06:00
3276a1cd8c
fix user session controller test
...
Update email input ID assertion to match actual template implementation
2026-02-03 13:42:24 -06:00
50257dbe68
more tests
2026-02-03 13:20:33 -06:00
6c8e670dae
docs: add gettext internationalization design
...
- Add comprehensive i18n design document with domain-based organization
(default, errors, auth, equipment, admin, emails domains)
- Document helper functions, implementation patterns, and migration workflow
- Fix multiple test suite issues:
* user_settings_live_test.exs: Update all tests to match current UI structure
- Fix user.name references (use first_name/last_name)
- Fix TOTP device creation (use create_totp_device/2)
- Update tab URLs and form IDs
- Update tab names (Account, API, Notifications)
- Remove obsolete tabs (Organizations, Activity)
- Fix password tests (pattern match redirect without flash token)
- Update sudo mode behavior
* account_data_controller_test.exs: Fix user profile assertions
* rate_limit_test.exs: Fix unused variable warning
* settings_live_test.exs: Fix organization form validation test
2026-02-02 09:33:01 -06:00
02833d0b44
Add rate limiting to auth and API endpoints using Hammer
2026-02-01 14:59:54 -06:00
d9876d8217
Remove misleading duplicate header test from CaptureTimezone
...
The test incorrectly suggested the plug handles duplicate headers,
but put_req_header replaces values. Cloudflare only sends one
cf-timezone header, making this test unnecessary.
2026-02-01 11:08:12 -06:00
c4e8c70e7d
Add CaptureTimezone plug to extract cf-timezone header
2026-02-01 11:02:57 -06:00
e0552ac97d
add security headers
2026-01-29 10:33:24 -06:00
eb91798729
agent improvements and agent config
2026-01-16 17:26:51 -06:00
f9b575816a
Fix database ownership issues in agent auth tests
...
- Update AgentAuth plug to use synchronous heartbeat updates in test env
- Refactor async heartbeat logic to reduce nesting (Credo)
- Remove Process.sleep from tests (no longer needed with sync updates)
This fixes 'owner exited' database errors in the test suite by avoiding
async Task spawns during tests, which caused DB connection ownership
conflicts with Ecto's sandbox mode.
2026-01-13 13:16:54 -06:00
3fe051fd19
Add comprehensive AgentAuth plug tests
...
Added 8 tests covering all plug functionality:
- init/1 option passing
- Valid token authentication
- Invalid authorization header scenarios
- Malformed Bearer token handling
- Invalid token value rejection
- Asynchronous heartbeat updates
- Token verification error handling
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-13 08:35:13 -06:00
