Andras Bacsai 66dc1515d4 fix(security): prevent snapshot replay in API token permission checks ... Never trust Livewire component properties for authorization decisions, as snapshots can be replayed from another user's session. Re-evaluate all permission checks fresh using auth()->user()->can() against current policies to ensure the authenticated user is being authorized, not a replayed copy. - Replace cached canUse* booleans with fresh policy evaluation - Add comprehensive security tests for token creation permissions - Update API authorization tests to verify middleware blocking behavior		2026-02-27 22:58:44 +01:00
..
Browser	test: add dashboard test and improve browser test coverage	2026-02-11 16:37:40 +01:00
Feature	fix(security): prevent snapshot replay in API token permission checks	2026-02-27 22:58:44 +01:00
Traits	test: setup database for upcoming tests	2024-12-04 12:43:52 +01:00
Unit	chore: prepare for PR	2026-02-27 18:31:35 +01:00
v4	test(auth): cover authorization scenarios for api and ui	2026-02-26 06:55:08 +01:00
CreatesApplication.php	Fix styling	2024-06-10 20:43:34 +00:00
DuskTestCase.php	Refactor DuskTestCase.php to use a hardcoded base URL	2024-10-17 21:26:06 +02:00
Pest.php	test(browser): cover resource settings persistence	2026-02-25 19:26:55 +01:00
TestCase.php	init of v4 🌮	2023-03-17 15:33:48 +01:00