Joseph Doherty 146a13238f Resolve all high-severity architecture review findings

2026-09-09 16:13:58 -04:00

..

AutoLoginAuthenticationHandlerTests.cs

test(security): DL-2 review nits — assert IsAuthenticated + clarify handler flag gating

2026-06-16 08:44:06 -04:00

CookieSessionValidatorTests.cs

fix(centralui): per-IP spray ceiling on LoginThrottle (arch-review 2026-08-19 P6-9)

2026-08-19 14:54:57 -04:00

DisableLoginGuardTests.cs

feat(security): DisableLoginGuard refuses DisableLogin outside Development without explicit ack

2026-07-08 14:52:00 -04:00

DisableLoginRegistrationTests.cs

test(security): DL-3 review nits — assert OnValidatePrincipal on prod path + warning/doc polish

2026-06-16 08:52:28 -04:00

ForwardedHeadersSetupTests.cs

fix(security): trusted-proxy ForwardedHeaders so LoginThrottle keys on the real client IP (plan R2-07 T2)

2026-07-13 10:38:41 -04:00

HttpAuditActorAccessorTests.cs

feat(audit): ScadaBridge IAuditActorAccessor + wire audit Actor from Auth principal at authenticated emit sites (Phase 3)

2026-06-02 15:33:01 -04:00

LibraryInboundApiKeyAdminTests.cs

fix(auth): C1 review polish — guard name at seam, document seam contract (throws/O(n)), explicit cookie test (review #1/#2/#3/#5/#8)

2026-06-02 04:01:43 -04:00

LoginThrottleTests.cs

fix(centralui): per-IP spray ceiling on LoginThrottle (arch-review 2026-08-19 P6-9)

2026-08-19 14:54:57 -04:00

PassiveSessionRegressionTests.cs

Resolve all high-severity architecture review findings

2026-09-09 16:13:58 -04:00

RolesAllTests.cs

feat(security): add Operator + Verifier roles + policies + LDAP mapping options (T14a)

2026-06-18 02:07:01 -04:00

RolesTests.cs

feat(security): add Operator + Verifier roles + policies + LDAP mapping options (T14a)

2026-06-18 02:07:01 -04:00

ScadaBridgeGroupRoleMapperTests.cs

feat(auth)!: ScadaBridge canonical roles + SoD collapse (Audit→Administrator, AuditReadOnly→Viewer) + config-DB migration (Task 1.7)

2026-06-02 08:00:47 -04:00

SecurityTests.cs

fix(central-ui): Flow Debugger Replay opens to OperationalAudit roles; Live run and Retry/Discard stay Deployer-only (arch-review F3)

2026-09-06 14:13:32 -04:00

ZB.MOM.WW.ScadaBridge.Security.Tests.csproj

fix(security): actually fix GHSA-2m69-gcr7-jv3q instead of suppressing it

2026-07-18 05:30:56 -04:00