2 commits

Author	SHA1	Message	Date
Andras Bacsai	66dc1515d4	fix(security): prevent snapshot replay in API token permission checks ... Never trust Livewire component properties for authorization decisions, as snapshots can be replayed from another user's session. Re-evaluate all permission checks fresh using auth()->user()->can() against current policies to ensure the authenticated user is being authorized, not a replayed copy. - Replace cached canUse* booleans with fresh policy evaluation - Add comprehensive security tests for token creation permissions - Update API authorization tests to verify middleware blocking behavior	2026-02-27 22:58:44 +01:00
Andras Bacsai	347af07a79	chore(tests): reorganize feature suites and expand team auth coverage	2026-02-26 07:13:19 +01:00

Renamed from tests/Feature/ApiTokenPermissionTest.php (Browse further)