towerops/lib/towerops_web
Graham McIntire bca2a3daeb
Some checks failed
Production Deployment / Run ExUnit Tests (push) Failing after 1m0s
Production Deployment / Build and Push Docker Image (push) Has been skipped
Fix remaining 4 audit items: policy enforcement, module splits, pagination, tests
SEC-M6: Role-based policy enforcement
- ForbiddenError exception for unauthorized access
- Policy.authorize!/3 in 6 LiveView modules
- Superuser bypass preserved
- 45/45 tests pass

Architecture: Oversized module splits
- topology.ex: 1590 -> 685 lines (-57%)
- New sub-modules: topology/evidence.ex, topology/map_view.ex, topology/stats.ex
- New devices/ordering.ex
- 217/217 tests pass

Architecture: Vendor HTTP pagination consolidation
- HTTP.paginate/5 shared helper in Towerops.HTTP
- visp, splynx, sonar refactored to use shared pagination
- 94/94 tests pass

Test Health + Credo fixes:
- api_tokens.ex: verify_token/1 flattened (nesting depth reduced)
- 3 new test files: AgentReleaseWebhookWorker, RfLinkHealthLive, MaintenanceLive.Index
- Weak assertions strengthened
- doctest Towerops.JobMonitoring added
- 255/255 tests pass
2026-07-26 15:47:19 -05:00
..
channels Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00
components Revert "feat: add beacon monitors with user and admin management" 2026-07-22 08:25:04 -05:00
controllers Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00
graphql Security hardening + performance fixes across codebase 2026-06-21 17:40:50 -05:00
helpers Major codebase cleanup: DRY schemas, remove dead config, consolidate modules 2026-06-16 15:29:22 -05:00
live Fix remaining 4 audit items: policy enforcement, module splits, pagination, tests 2026-07-26 15:47:19 -05:00
plugs credo fixes 2026-06-14 08:27:57 -05:00
changelog_parser.ex remove-gleam (#218) 2026-03-29 11:03:20 -05:00
endpoint.ex fix: resolve dependency vulnerabilities (mint CVE-2026-59249, cowlib CVE-2026-43966/43969) 2026-07-16 07:48:26 -05:00
gettext.ex init 2025-12-21 11:10:43 -06:00
gettext_helpers.ex Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00
graphql_socket.ex perf+refactor: codebase-wide query and antipattern audit 2026-04-28 16:58:51 -05:00
permissions.ex credo fixes 2026-06-14 08:27:57 -05:00
plug_exceptions.ex handle exceptions gracefully on api endpoints 2026-02-04 12:18:14 -06:00
remote_ip.ex Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00
router.ex Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00
scoped_resource.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
telemetry.ex credo fixes 2026-06-14 08:27:57 -05:00
user_auth.ex Fix 22 audit findings across security, performance, and architecture 2026-07-26 15:31:25 -05:00