cw2007/move_detect
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
move_detect/cloud/tests
History
유창욱 171ef3e1c5 fix(cloud): add nonce-replay + timestamp-window checks to config/heartbeat (M2) 
ConfigController::get and HeartbeatController::post verified HMAC but never
checked nonce replay or timestamp freshness, so a captured signed request
(e.g. a replayed heartbeat) could be replayed forever, masking a dead
device. Inject NonceRepository (+Config) into both and add the same
timestamp-window + nonce-remember checks IngestController already applies,
after HMAC verification and before the response/side effect.
2026-07-12 09:19:32 +09:00
..
Support feat(cloud): repository interfaces + in-memory test doubles 2026-07-11 23:32:16 +09:00
ApiSyncTest.php fix(cloud): add nonce-replay + timestamp-window checks to config/heartbeat (M2) 2026-07-12 09:19:32 +09:00
AuthControllerTest.php fix(cloud): add per-IP rate limit to /login before Argon2id verify (H2) 2026-07-12 09:11:47 +09:00
ConfigTest.php feat(cloud): P1-B scaffold — composer autoload + Config 2026-07-11 23:16:13 +09:00
DashboardTest.php fix(cloud): enforce CSRF on authenticated state-changing POSTs (M1) 2026-07-12 09:16:38 +09:00
EventValidatorTest.php fix(cloud): type-guard EventValidator fields against malformed input 2026-07-11 23:46:38 +09:00
HmacTest.php test(cloud): golden HMAC vectors proving P1-A Python interop 2026-07-11 23:25:15 +09:00
HttpTest.php feat(cloud): Http Request/Response primitives 2026-07-11 23:54:58 +09:00
ImageProcessorTest.php fix(cloud): session-id regeneration on login (fixation) + pristine test output 2026-07-12 00:35:41 +09:00
IngestControllerTest.php fix(cloud): move ingest per-device rate limit post-auth, add pre-auth IP limit (H1) 2026-07-12 09:09:31 +09:00
PasswordCsrfTest.php feat(cloud): argon2id password + CSRF token helpers 2026-07-12 00:11:20 +09:00
PdoIntegrationTest.php feat(cloud): PDO repositories + schema + Cafe24 deploy doc 2026-07-12 01:58:05 +09:00
RbacTest.php feat(cloud): RBAC permission matrix 2026-07-12 00:19:47 +09:00
RepositoryContractTest.php fix(cloud): centralize test-double autoloading via composer files 2026-07-11 23:38:01 +09:00
RouterTest.php feat(cloud): path-param router + dispatch 2026-07-12 00:49:52 +09:00
WiringSmokeTest.php feat(cloud): front controller wiring + views + zone-draw UI 2026-07-12 01:24:42 +09:00
ZoneConfigTest.php fix(cloud): enforce CSRF on authenticated state-changing POSTs (M1) 2026-07-12 09:16:38 +09:00