towerops/test/towerops_web
Graham McIntire 3a408a8dc1 Security hardening + performance fixes across codebase
CRITICAL:
- Membership: remove :role/:org_id/:user_id from mass-assignment cast; use explicit create_changeset/4 and role_update_changeset/2
- GraphQL member resolver: add authorize_invite/3 checking admin/owner role and role hierarchy
- REST invitations controller: add auth check for invite creation

HIGH:
- ApiToken: remove :organization_id/:user_id from cast; use explicit create_changeset/4

MEDIUM:
- Move 8 LiveView Ecto queries into context modules (Admin, Alerts, Coverages, OnCall, Snmp)
- Replace Process.put/Process.get with socket assigns for unresolved_alert_count (user_auth + layouts + 50 templates)
- Add batch get_utilization_for_interfaces/1 to eliminate N+1 capacity queries in device show
- Replace Process.sleep with Process.monitor/assert_receive or Process.send_after in 5 test files

LOW:
- Add handle_params/3 to UserResetPasswordLive, UserRegistrationLive, StatusPageLive
- Remove redundant Repo.preload calls; add preloads to list_site_devices/1
- Fix @impl annotations and credo nesting warnings
2026-06-21 17:40:50 -05:00
..
channels credo fixes 2026-06-15 11:15:46 -05:00
components chore: add jump_credo_checks ~> 0.4 with all 19 checks enabled 2026-06-12 13:44:31 -05:00
controllers Major codebase cleanup: DRY schemas, remove dead config, consolidate modules 2026-06-16 15:29:22 -05:00
endpoint Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
graphql Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
helpers Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
integration Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
live Security hardening + performance fixes across codebase 2026-06-21 17:40:50 -05:00
plugs credo fixes 2026-06-16 09:56:51 -05:00
changelog_parser_test.exs credo fixes 2026-06-16 09:56:51 -05:00
graphql_socket_test.exs credo fixes 2026-06-13 14:52:18 -05:00
permissions_test.exs credo fixes 2026-06-13 18:20:20 -05:00
plug_exceptions_test.exs handle exceptions gracefully on api endpoints 2026-02-04 12:18:14 -06:00
remote_ip_test.exs chore: add jump_credo_checks ~> 0.4 with all 19 checks enabled 2026-06-12 13:45:59 -05:00
telemetry_filter_test.exs Major codebase cleanup: DRY schemas, remove dead config, consolidate modules 2026-06-16 15:29:22 -05:00
telemetry_test.exs Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
user_auth_test.exs Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00