cw2007/move_detect
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
move_detect/cloud/tests
History
유창욱 238b932c86 fix(cloud): add per-IP rate limit to /login before Argon2id verify (H2) 
Every login attempt, including unknown users (via DUMMY_HASH), forces a full
Argon2id verify with no rate limit, letting a flood take down the login
endpoint / shared host via hashing-cost amplification. Add a pre-auth
per-IP limiter (RateLimiterRepository, default 20/min) as the first check
in AuthController::login, before any user lookup or password hashing.
2026-07-12 09:11:47 +09:00
..
Support feat(cloud): repository interfaces + in-memory test doubles 2026-07-11 23:32:16 +09:00
ApiSyncTest.php feat(cloud): device config + heartbeat sync API (HMAC) 2026-07-12 01:13:02 +09:00
AuthControllerTest.php fix(cloud): add per-IP rate limit to /login before Argon2id verify (H2) 2026-07-12 09:11:47 +09:00
ConfigTest.php feat(cloud): P1-B scaffold — composer autoload + Config 2026-07-11 23:16:13 +09:00
DashboardTest.php feat(cloud): dashboard list/detail/ack + auth-gated snapshot proxy 2026-07-12 00:56:43 +09:00
EventValidatorTest.php fix(cloud): type-guard EventValidator fields against malformed input 2026-07-11 23:46:38 +09:00
HmacTest.php test(cloud): golden HMAC vectors proving P1-A Python interop 2026-07-11 23:25:15 +09:00
HttpTest.php feat(cloud): Http Request/Response primitives 2026-07-11 23:54:58 +09:00
ImageProcessorTest.php fix(cloud): session-id regeneration on login (fixation) + pristine test output 2026-07-12 00:35:41 +09:00
IngestControllerTest.php fix(cloud): move ingest per-device rate limit post-auth, add pre-auth IP limit (H1) 2026-07-12 09:09:31 +09:00
PasswordCsrfTest.php feat(cloud): argon2id password + CSRF token helpers 2026-07-12 00:11:20 +09:00
PdoIntegrationTest.php feat(cloud): PDO repositories + schema + Cafe24 deploy doc 2026-07-12 01:58:05 +09:00
RbacTest.php feat(cloud): RBAC permission matrix 2026-07-12 00:19:47 +09:00
RepositoryContractTest.php fix(cloud): centralize test-double autoloading via composer files 2026-07-11 23:38:01 +09:00
RouterTest.php feat(cloud): path-param router + dispatch 2026-07-12 00:49:52 +09:00
WiringSmokeTest.php feat(cloud): front controller wiring + views + zone-draw UI 2026-07-12 01:24:42 +09:00
ZoneConfigTest.php feat(cloud): polygon validation + zone config controller (RBAC) 2026-07-12 01:02:37 +09:00