towerops

graham/towerops

Fork 0

Commit graph

Author	SHA1	Message	Date
Graham McIntire	532d88ffb9	perf: disable Req retry for faster error tests - Add retry: false to VISP Client HTTP requests - Add retry: false to ReleaseChecker GitHub API requests - Remove unused Plug.Conn import from RemoteIpLogger - Remove unused default parameter from req_get/2 Results: - VISP sync test: 7007ms → 113ms (62x faster) - ReleaseChecker test: 7004ms → 17ms (402x faster) - UserResetPasswordLive test: 1495ms → 284ms (5x faster) Req's default retry behavior (1s, 2s, 4s exponential backoff) was causing 7-second delays for HTTP 500/503 error responses in tests. For these clients, immediate failure is preferred over retries.	2026-03-10 16:19:31 -05:00
Graham McIntire	fb1d4c564f	security: fix critical vulnerabilities and atom exhaustion risks Critical fixes: - Add [:safe] option to binary_to_term to prevent RCE attacks - Implement whitelist validation for String.to_atom conversions - Add input validation before String.to_existing_atom usage Changes: - MIB compiler and cache: Use safe binary deserialization - SNMP contexts: Whitelist protocol, device type, and source atoms - API controllers: Validate error message keys before atom conversion - Reduce function nesting to comply with Credo standards All 6,145 tests passing with zero Credo issues. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-08 10:30:30 -06:00
Graham McIntire	c7f02eac24	add api for mobile login	2026-01-15 15:36:14 -06:00

Author

SHA1

Message

Date

Graham McIntire

532d88ffb9

perf: disable Req retry for faster error tests

- Add retry: false to VISP Client HTTP requests
- Add retry: false to ReleaseChecker GitHub API requests
- Remove unused Plug.Conn import from RemoteIpLogger
- Remove unused default parameter from req_get/2

Results:
- VISP sync test: 7007ms → 113ms (62x faster)
- ReleaseChecker test: 7004ms → 17ms (402x faster)
- UserResetPasswordLive test: 1495ms → 284ms (5x faster)

Req's default retry behavior (1s, 2s, 4s exponential backoff) was
causing 7-second delays for HTTP 500/503 error responses in tests.
For these clients, immediate failure is preferred over retries.

2026-03-10 16:19:31 -05:00

Graham McIntire

fb1d4c564f

security: fix critical vulnerabilities and atom exhaustion risks

Critical fixes:
- Add [:safe] option to binary_to_term to prevent RCE attacks
- Implement whitelist validation for String.to_atom conversions
- Add input validation before String.to_existing_atom usage

Changes:
- MIB compiler and cache: Use safe binary deserialization
- SNMP contexts: Whitelist protocol, device type, and source atoms
- API controllers: Validate error message keys before atom conversion
- Reduce function nesting to comply with Credo standards

All 6,145 tests passing with zero Credo issues.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-02-08 10:30:30 -06:00

Graham McIntire

c7f02eac24

add api for mobile login

2026-01-15 15:36:14 -06:00

3 commits