prehistoric-systems/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-03-11 08:55:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
coolify/tests/Feature/Security
History
Andras Bacsai 66dc1515d4 fix(security): prevent snapshot replay in API token permission checks 
Never trust Livewire component properties for authorization decisions, as
snapshots can be replayed from another user's session. Re-evaluate all
permission checks fresh using auth()->user()->can() against current policies
to ensure the authenticated user is being authorized, not a replayed copy.

- Replace cached canUse* booleans with fresh policy evaluation
- Add comprehensive security tests for token creation permissions
- Update API authorization tests to verify middleware blocking behavior
2026-02-27 22:58:44 +01:00
..
ApiTokenCreationSecurityTest.php fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
CaCertificateCommandInjectionTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
CmdHealthCheckValidationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
CommandInjectionSecurityTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
IpAllowlistTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
TrustHostsMiddlewareTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00