Joseph Doherty 24c2097ec3 fix(security): ship trusted-proxy ForwardedHeaders config for Traefik topologies + document lockout-DoS trade-off (plan R2-07 T3)

2026-07-13 10:42:37 -04:00

..

AutoLoginAuthenticationHandlerTests.cs

test(security): DL-2 review nits — assert IsAuthenticated + clarify handler flag gating

2026-06-16 08:44:06 -04:00

CookieSessionValidatorTests.cs

fix(security): M2.19 review nits — idle/refresh config guard + adapter tests + dead-var/doc cleanup (#15)

2026-06-16 08:12:11 -04:00

DisableLoginGuardTests.cs

feat(security): DisableLoginGuard refuses DisableLogin outside Development without explicit ack

2026-07-08 14:52:00 -04:00

DisableLoginRegistrationTests.cs

test(security): DL-3 review nits — assert OnValidatePrincipal on prod path + warning/doc polish

2026-06-16 08:52:28 -04:00

ForwardedHeadersSetupTests.cs

fix(security): trusted-proxy ForwardedHeaders so LoginThrottle keys on the real client IP (plan R2-07 T2)

2026-07-13 10:38:41 -04:00

HttpAuditActorAccessorTests.cs

feat(audit): ScadaBridge IAuditActorAccessor + wire audit Actor from Auth principal at authenticated emit sites (Phase 3)

2026-06-02 15:33:01 -04:00

LibraryInboundApiKeyAdminTests.cs

fix(auth): C1 review polish — guard name at seam, document seam contract (throws/O(n)), explicit cookie test (review #1/#2/#3/#5/#8)

2026-06-02 04:01:43 -04:00

LoginThrottleTests.cs

fix(security): ship trusted-proxy ForwardedHeaders config for Traefik topologies + document lockout-DoS trade-off (plan R2-07 T3)

2026-07-13 10:42:37 -04:00

RolesAllTests.cs

feat(security): add Operator + Verifier roles + policies + LDAP mapping options (T14a)

2026-06-18 02:07:01 -04:00

RolesTests.cs

feat(security): add Operator + Verifier roles + policies + LDAP mapping options (T14a)

2026-06-18 02:07:01 -04:00

ScadaBridgeGroupRoleMapperTests.cs

feat(auth)!: ScadaBridge canonical roles + SoD collapse (Audit→Administrator, AuditReadOnly→Viewer) + config-DB migration (Task 1.7)

2026-06-02 08:00:47 -04:00

SecurityTests.cs

feat(management): any-of role gates; restrict ListSecuredWrites to Operator/Verifier/Admin (arch-review UA1)

2026-07-10 05:03:51 -04:00

ZB.MOM.WW.ScadaBridge.Security.Tests.csproj

feat(audit): ScadaBridge IAuditActorAccessor + wire audit Actor from Auth principal at authenticated emit sites (Phase 3)

2026-06-02 15:33:01 -04:00