3 Commits (255bdaa2a0be9ade8cfe533a0fa6b5b485ae7efa)

Author	SHA1	Message	Date
Your Name	255bdaa2a0	Use LazilyRefreshDatabase instead of plain RefreshDatabase in tests ... Aligns with the app's dominant convention (84 files vs 10). Avoids running migrations for tests that never touch the database. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2 weeks ago
Your Name	f0e951dcce	fix: stop caching raw Eloquent models to prevent incomplete-object 500s ... Caching an Eloquent model in a Cache::remember closure could deserialize into a __PHP_Incomplete_Class on read, throwing 'attempt to access a property on an incomplete object' and returning a 500. This surfaced on guest profile pages (ProfileController::buildProfile reading $user->user->settings) and affected several other latent call sites. Changes: - ProfileController: cache a plain settings array instead of the UserSetting model; fall back to defaults when the settings row is missing - StoryService::getById: fetch a live model instead of caching it - InstanceService::getByDomain, CustomEmoji::scan: cache arrays - Site/MobileController: cache Page data as an array via a shared ManagesCachedPages trait; update blade views to array access - Add public-route smoke/regression tests covering the cache-read path	4 weeks ago
Your Name	8a2649b3ff	feat: add critical path test suite and fix auth/config issues ... Test Infrastructure: - Modernize phpunit.xml (bootstrap, source block, Laravel 12 env vars) - Configure tests/Pest.php with pest()->extend(TestCase::class)->in('Feature') - Add docker-compose.test.yml (Redis for test suite) - Add composer test/test:quick scripts - Rename CACHE_DRIVER to CACHE_STORE across config (backwards compatible) - Update .env.testing for in-memory SQLite + Docker Redis Test Coverage (190 tests): - CriticalRoutes: public routes, auth routes, API endpoints, middleware, schedule - Auth/LoginTest: login, logout, rate limiting, redirect behavior - Auth/RegisterTest: registration flow, validation, disabled registration - Auth/PasswordResetTest: reset request, token validation, password update - Auth/TwoFactorTest: 2FA checkpoint, setup behind password confirmation - Auth/PasswordConfirmationTest: sudo mode flow via Laravel password.confirm - Api/ScopeTest: scope enforcement, public endpoints, admin access Bugs Fixed: - Fix unauthenticated API returning 500 instead of 401 (AuthenticationException not handled in custom exception renderer in bootstrap/app.php) - Replace custom DangerZone middleware with Laravel password.confirm - Add HasFactory trait to Profile model for test factories Bugs Documented (known-bugs group): - Registration crashes with str_ends_with TypeError (RegisterController:82) - OAuth routes use legacy array syntax causing ReflectionFunction TypeError	4 weeks ago