cw2007/move_detect
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
move_detect/cloud/tests
History
유창욱 3405c1e2cc fix(cloud): enforce CSRF on authenticated state-changing POSTs (M1) 
Only SameSite=Lax protected the acknowledge and zone save/delete endpoints,
even though a Csrf helper and mintable token already existed. Add
GET /api/csrf (CsrfController::token) to mint/return a per-session token,
check it (auth -> rbac -> csrf -> mutate) in EventDetailController::acknowledge
and ZoneConfigController::save/delete, and wire app.js/zone-draw.js to fetch
the token on load and send it as X-Csrf-Token on every POST.
2026-07-12 09:16:38 +09:00
..
Support feat(cloud): repository interfaces + in-memory test doubles 2026-07-11 23:32:16 +09:00
ApiSyncTest.php feat(cloud): device config + heartbeat sync API (HMAC) 2026-07-12 01:13:02 +09:00
AuthControllerTest.php fix(cloud): add per-IP rate limit to /login before Argon2id verify (H2) 2026-07-12 09:11:47 +09:00
ConfigTest.php feat(cloud): P1-B scaffold — composer autoload + Config 2026-07-11 23:16:13 +09:00
DashboardTest.php fix(cloud): enforce CSRF on authenticated state-changing POSTs (M1) 2026-07-12 09:16:38 +09:00
EventValidatorTest.php fix(cloud): type-guard EventValidator fields against malformed input 2026-07-11 23:46:38 +09:00
HmacTest.php test(cloud): golden HMAC vectors proving P1-A Python interop 2026-07-11 23:25:15 +09:00
HttpTest.php feat(cloud): Http Request/Response primitives 2026-07-11 23:54:58 +09:00
ImageProcessorTest.php fix(cloud): session-id regeneration on login (fixation) + pristine test output 2026-07-12 00:35:41 +09:00
IngestControllerTest.php fix(cloud): move ingest per-device rate limit post-auth, add pre-auth IP limit (H1) 2026-07-12 09:09:31 +09:00
PasswordCsrfTest.php feat(cloud): argon2id password + CSRF token helpers 2026-07-12 00:11:20 +09:00
PdoIntegrationTest.php feat(cloud): PDO repositories + schema + Cafe24 deploy doc 2026-07-12 01:58:05 +09:00
RbacTest.php feat(cloud): RBAC permission matrix 2026-07-12 00:19:47 +09:00
RepositoryContractTest.php fix(cloud): centralize test-double autoloading via composer files 2026-07-11 23:38:01 +09:00
RouterTest.php feat(cloud): path-param router + dispatch 2026-07-12 00:49:52 +09:00
WiringSmokeTest.php feat(cloud): front controller wiring + views + zone-draw UI 2026-07-12 01:24:42 +09:00
ZoneConfigTest.php fix(cloud): enforce CSRF on authenticated state-changing POSTs (M1) 2026-07-12 09:16:38 +09:00