towerops/test/towerops_web/controllers/api
Graham McIntire 095c5d3236 fix: M1 — prevent cross-org resource existence probing via scoped fetch
Use Repo.get_by(schema, id: id, organization_id: organization_id) instead of
Repo.get + pattern match so that resources from wrong orgs return :not_found
instead of :forbidden, preventing org membership discovery.
2026-05-12 13:44:19 -05:00
..
v1 fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
account_data_controller_test.exs perf(tests): remove/reduce Process.sleep calls for faster tests 2026-03-06 07:57:30 -06:00
mobile_auth_controller_test.exs fix: 3 more high-severity bugs (H19, H20, H25) 2026-05-12 11:32:20 -05:00
mobile_controller_test.exs test: cover MobileController format_equipment_details interface mapping 2026-05-09 11:55:50 -05:00