Graham McIntire 39e588c686 fix: API token access control, admin form crash, MIB validation, CSP dedup ... - Add organization membership check before API token creation - Fix admin security allowlist form reading current_user instead of current_scope.user - Use recursive File.ls instead of Path.wildcard to include hidden files in MIB validation - Add upload size check before ZIP extraction in MIB controller - Centralize CSP in SecurityHeaders plug with per-request nonces instead of 'unsafe-inline'		2026-05-12 09:08:57 -05:00
..
v1	fix: API token access control, admin form crash, MIB validation, CSP dedup	2026-05-12 09:08:57 -05:00
account_data_controller.ex	dialyzer: fix all unmatched_return warnings (154 → 0)	2026-04-21 10:03:55 -05:00
error_helpers.ex	perf: disable Req retry for faster error tests	2026-03-10 16:19:31 -05:00
mobile_auth_controller.ex	fix: return raw session token instead of hash in mobile QR login (#42)	2026-03-16 13:59:52 -05:00
mobile_controller.ex	tests: raise coverage to 70% via helper promotion + new unit/property tests	2026-04-24 09:49:06 -05:00