Commit Graph

182 Commits

Author SHA1 Message Date
3ca2334932 feat: return rotated refresh token on refresh 2026-01-08 06:16:01 +01:00
02d0c3f946 feat: rotate refresh tokens with shared validation helper 2026-01-08 06:15:53 +01:00
1b55c9543e fix: simplify else-if branches 2026-01-07 17:16:02 +01:00
73930dabd8 feat: use a map for O(1) lookup instead of a linear search 2026-01-07 15:20:03 +01:00
19aadc6fc8 fix: prevent integer overflow in uint validation 2026-01-07 15:10:51 +01:00
75a33994db fix: use CommandContext in deployment test 2026-01-07 09:54:46 +01:00
87cc0ff68c feat: expand CleanupTestData to clear refresh tokens 2026-01-07 09:31:51 +01:00
6eb6b2c4e2 refactor: use testutils helpers and gorm for user/post setup 2026-01-07 09:31:30 +01:00
c7fb1461ab clean: remove unused duplicate functions that are already implemented/used in repositories/fixtures.go 2025-12-28 08:21:58 +01:00
8cb02413aa refactor: replace createTestUserWithAuth with consolidated helper 2025-12-27 17:43:31 +01:00
3e9246c975 refactor: make createAuthenticatedUser accept interface and add user-only variant 2025-12-27 17:43:19 +01:00
c04602d8d9 refactor: use testutils helper for account deletion request creation 2025-12-27 17:33:04 +01:00
e5c72591e6 feat: add repo-backed entity factories 2025-12-27 17:32:01 +01:00
c29ccecc15 refactor: variables name and use strings.Cut() 2025-12-27 08:44:29 +01:00
de1e3f2190 fix: reject 5xx errors in TestQueryParameters to catch regressions 2025-12-26 18:49:32 +01:00
310875368d fix: make TestStaticFileRoute validate static handler correctly 2025-12-26 18:48:44 +01:00
20f14d0863 refactor: use middleware.IsHTTPS instead of local function 2025-12-26 17:41:16 +01:00
d0914eb5dc test: update IsHTTPS test to use middleware.IsHTTPS 2025-12-26 17:41:04 +01:00
ab3efc99a8 refactor: remove duplicate IsHTTPS, use middleware.IsHTTPS 2025-12-26 17:40:47 +01:00
9017816812 refactor: export IsHTTPS function for shared use 2025-12-26 17:40:31 +01:00
7b9250802e test: verify login works with legacy passwords 2025-12-26 17:36:13 +01:00
3f4cad5488 fix: remove password complexity validation from login 2025-12-26 17:35:59 +01:00
027df4f60c test: add security header preservation tests for cache 2025-12-26 17:33:25 +01:00
77886ddef5 fix: preserve security headers on cache hits 2025-12-26 17:33:12 +01:00
5477bbf0a7 test: add integration test for CSRF cookie-only bypass 2025-12-26 17:29:51 +01:00
fc23cbd6fd test: verify CSRF rejects requests with only cookie token 2025-12-26 17:28:58 +01:00
0802b9dd9d fix: GetCSRFToken() shouldn't fall back to the cookie 2025-12-26 17:28:10 +01:00
817205d42f refactor: modernize using min() 2025-12-16 15:45:51 +01:00
4587609e17 refactor: create createTestRouter and test edge cases 2025-12-14 21:14:42 +01:00
33da6503e3 test: also test put/delete routes 2025-12-14 21:06:15 +01:00
cafc44ed77 test: add a test for route parameters 2025-12-14 21:04:36 +01:00
1480135e75 test: verified all routes to exist 2025-12-14 21:02:25 +01:00
02a764c736 clean: remove merged files 2025-12-14 20:52:14 +01:00
6834ad7764 refactor: merge facade, types and utils into one auth_service.go 2025-12-14 20:52:03 +01:00
a8d363b2bf fix: templates now parse with the same func map as the page handler 2025-12-09 21:37:21 +01:00
0cd68e847c refactor: add a helper to centralize CSRF token retrieval 2025-12-09 15:58:28 +01:00
d4e91b6034 refactor: complete refactor and better helpers use 2025-11-29 15:19:41 +01:00
7d46d3e81b clean: remove the unused expectedValue in assertHeader (always set to "") 2025-11-29 15:19:28 +01:00
216aaf3117 refactor: clean code and use new request helpers 2025-11-29 14:58:52 +01:00
435047ad0c refactor: clean code 2025-11-29 14:58:37 +01:00
b7ee8bd11d refactor: clean variable names and use new request helpers 2025-11-29 14:58:20 +01:00
040cd48be8 refactor: clean variables 2025-11-29 14:58:07 +01:00
2dd16e0e00 refactor: complete 2025-11-29 14:56:18 +01:00
d6db70cc79 refactor: clean code and variables, use new request helpers 2025-11-29 14:55:47 +01:00
58e10ade7d refactor: clean variable names and modernize code 2025-11-29 14:50:35 +01:00
7403a75d8e refactor: clean variable naming 2025-11-29 14:46:26 +01:00
b429bc11af refactor: clean code and use new request helpers 2025-11-29 14:41:38 +01:00
2ec5c28fb5 refactor: rename variables and clean code 2025-11-29 14:37:18 +01:00
3743a99e40 refactor: req -> request, rec -> recorder, reqBody -> requestBody... 2025-11-29 14:21:07 +01:00
5710921b87 refactor: use new request helpers 2025-11-29 14:17:25 +01:00