prehistoric-systems/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-03-11 08:55:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
coolify/tests/Feature
History
Andras Bacsai 66dc1515d4 fix(security): prevent snapshot replay in API token permission checks 
Never trust Livewire component properties for authorization decisions, as
snapshots can be replayed from another user's session. Re-evaluate all
permission checks fresh using auth()->user()->can() against current policies
to ensure the authenticated user is being authorized, not a replayed copy.

- Replace cached canUse* booleans with fresh policy evaluation
- Add comprehensive security tests for token creation permissions
- Update API authorization tests to verify middleware blocking behavior
2026-02-27 22:58:44 +01:00
..
Api test: refresh api and job feature suites 2026-02-26 08:37:20 +01:00
Application chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
Auth test: refresh api and job feature suites 2026-02-26 08:37:20 +01:00
Authorization fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
EnvironmentVariable chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
Helpers chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
Jobs test: refresh api and job feature suites 2026-02-26 08:37:20 +01:00
Proxy fix(auth): enforce proxy authorization checks in server navbar 2026-02-25 15:37:04 +01:00
Security fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
Server chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
Service chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
Team chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00