prehistoric-systems/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-03-11 08:55:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
coolify/tests/Feature/Authorization
History
Andras Bacsai 66dc1515d4 fix(security): prevent snapshot replay in API token permission checks 
Never trust Livewire component properties for authorization decisions, as
snapshots can be replayed from another user's session. Re-evaluate all
permission checks fresh using auth()->user()->can() against current policies
to ensure the authenticated user is being authorized, not a replayed copy.

- Replace cached canUse* booleans with fresh policy evaluation
- Add comprehensive security tests for token creation permissions
- Update API authorization tests to verify middleware blocking behavior
2026-02-27 22:58:44 +01:00
..
ApiAuthorizationTest.php fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
ApiTokenPermissionTest.php fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
ApplicationConfigAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
CloudProviderAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
DashboardAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
DatabaseConfigAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
DestinationOwnershipTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
EnvironmentVariableValueHidingTest.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
LegacyMemberTokenTest.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
NavbarDeleteTeamAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
NotificationAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
ProjectEnvironmentAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
ResourceHeadingAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
ResourceOperationsCrossTenantTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
SecurityPageAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
ServerAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
ServiceConfigAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
SharedResourceAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
TeamAuthorizationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00