graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/test/towerops_web/controllers/api
History
Graham McIntire 33daaf14f0 fix: return raw session token instead of hash in mobile QR login (#42) 
the complete_qr_login endpoint was returning session.token (the SHA256
hash stored in the database) instead of session.raw_token (the plaintext).
this caused all subsequent API calls and WebSocket connections to fail
with 401/REFUSED since the server would hash the already-hashed token.

adds a regression test that verifies the returned token is usable for
authenticated API requests.

Reviewed-on: graham/towerops-web#42
2026-03-16 13:59:52 -05:00
..
v1 test: improve test coverage and code quality 2026-03-15 14:49:55 -05:00
account_data_controller_test.exs perf(tests): remove/reduce Process.sleep calls for faster tests 2026-03-06 07:57:30 -06:00
mobile_auth_controller_test.exs fix: return raw session token instead of hash in mobile QR login (#42) 2026-03-16 13:59:52 -05:00
mobile_controller_test.exs Fix tests, credo issues, and Gaiia sync bugs 2026-02-15 11:55:49 -06:00