Commit Graph

123 Commits

Author SHA1 Message Date
8cb02413aa refactor: replace createTestUserWithAuth with consolidated helper 2025-12-27 17:43:31 +01:00
3e9246c975 refactor: make createAuthenticatedUser accept interface and add user-only variant 2025-12-27 17:43:19 +01:00
c04602d8d9 refactor: use testutils helper for account deletion request creation 2025-12-27 17:33:04 +01:00
e5c72591e6 feat: add repo-backed entity factories 2025-12-27 17:32:01 +01:00
c29ccecc15 refactor: variables name and use strings.Cut() 2025-12-27 08:44:29 +01:00
de1e3f2190 fix: reject 5xx errors in TestQueryParameters to catch regressions 2025-12-26 18:49:32 +01:00
310875368d fix: make TestStaticFileRoute validate static handler correctly 2025-12-26 18:48:44 +01:00
20f14d0863 refactor: use middleware.IsHTTPS instead of local function 2025-12-26 17:41:16 +01:00
d0914eb5dc test: update IsHTTPS test to use middleware.IsHTTPS 2025-12-26 17:41:04 +01:00
ab3efc99a8 refactor: remove duplicate IsHTTPS, use middleware.IsHTTPS 2025-12-26 17:40:47 +01:00
9017816812 refactor: export IsHTTPS function for shared use 2025-12-26 17:40:31 +01:00
7b9250802e test: verify login works with legacy passwords 2025-12-26 17:36:13 +01:00
3f4cad5488 fix: remove password complexity validation from login 2025-12-26 17:35:59 +01:00
027df4f60c test: add security header preservation tests for cache 2025-12-26 17:33:25 +01:00
77886ddef5 fix: preserve security headers on cache hits 2025-12-26 17:33:12 +01:00
5477bbf0a7 test: add integration test for CSRF cookie-only bypass 2025-12-26 17:29:51 +01:00
fc23cbd6fd test: verify CSRF rejects requests with only cookie token 2025-12-26 17:28:58 +01:00
0802b9dd9d fix: GetCSRFToken() shouldn't fall back to the cookie 2025-12-26 17:28:10 +01:00
817205d42f refactor: modernize using min() 2025-12-16 15:45:51 +01:00
4587609e17 refactor: create createTestRouter and test edge cases 2025-12-14 21:14:42 +01:00
33da6503e3 test: also test put/delete routes 2025-12-14 21:06:15 +01:00
cafc44ed77 test: add a test for route parameters 2025-12-14 21:04:36 +01:00
1480135e75 test: verified all routes to exist 2025-12-14 21:02:25 +01:00
02a764c736 clean: remove merged files 2025-12-14 20:52:14 +01:00
6834ad7764 refactor: merge facade, types and utils into one auth_service.go 2025-12-14 20:52:03 +01:00
a8d363b2bf fix: templates now parse with the same func map as the page handler 2025-12-09 21:37:21 +01:00
0cd68e847c refactor: add a helper to centralize CSRF token retrieval 2025-12-09 15:58:28 +01:00
d4e91b6034 refactor: complete refactor and better helpers use 2025-11-29 15:19:41 +01:00
7d46d3e81b clean: remove the unused expectedValue in assertHeader (always set to "") 2025-11-29 15:19:28 +01:00
216aaf3117 refactor: clean code and use new request helpers 2025-11-29 14:58:52 +01:00
435047ad0c refactor: clean code 2025-11-29 14:58:37 +01:00
b7ee8bd11d refactor: clean variable names and use new request helpers 2025-11-29 14:58:20 +01:00
040cd48be8 refactor: clean variables 2025-11-29 14:58:07 +01:00
2dd16e0e00 refactor: complete 2025-11-29 14:56:18 +01:00
d6db70cc79 refactor: clean code and variables, use new request helpers 2025-11-29 14:55:47 +01:00
58e10ade7d refactor: clean variable names and modernize code 2025-11-29 14:50:35 +01:00
7403a75d8e refactor: clean variable naming 2025-11-29 14:46:26 +01:00
b429bc11af refactor: clean code and use new request helpers 2025-11-29 14:41:38 +01:00
2ec5c28fb5 refactor: rename variables and clean code 2025-11-29 14:37:18 +01:00
3743a99e40 refactor: req -> request, rec -> recorder, reqBody -> requestBody... 2025-11-29 14:21:07 +01:00
5710921b87 refactor: use new request helpers 2025-11-29 14:17:25 +01:00
84d9c81484 refactor: rec -> recorder, req -> request and modernize loop 2025-11-29 14:15:07 +01:00
b0c2038927 feat: add new helpers to make requests properly in integration tests 2025-11-29 14:11:32 +01:00
fd88931146 refactor: variable names and modernize loop 2025-11-25 14:37:59 +01:00
6ce0f4dfad refactor: name variables 2025-11-25 10:13:10 +01:00
cded14c526 fix: force correct mime types for static files after modifying compression middleware's buffering 2025-11-24 07:53:08 +01:00
279255b587 fix: don't let rate limiting fails the test 2025-11-23 21:48:11 +01:00
b83f8c2228 fix: update ValidationMiddleware to return a JSON error response when JSON decoding fails 2025-11-23 21:42:27 +01:00
aabc48128c fix: use router in handlers integration tests (for dto validation) 2025-11-23 15:10:55 +01:00
68716b977b fix: verify XSS sanitization in handler response instead of repository stub 2025-11-23 15:01:54 +01:00