pixelfed

Commit Graph

Author	SHA1	Message	Date
Your Name	c0cde2f682	refactor: move 52 legacy models from App\ to App\Models\ Move all Eloquent models from the app/ root directory to app/Models/ for consistency with modern Laravel conventions. The project already had 54 models in App\Models; this migrates the remaining 52 legacy models. Changes: - Move 52 model files from app/ to app/Models/ - Update namespace declarations in each model - Update all ~1000 import references across the codebase - Add Relation::morphMap() in AppServiceProvider for backward compatibility with existing polymorphic database records - Add missing HasSnowflakePrimary imports for models that relied on same-namespace resolution	4 weeks ago
Your Name	9f81a5b425	test: un-skip Passport scope tests now that middleware is fixed All v1 admin route security tests now pass with proper assertions after the CheckForAnyScope → CheckTokenForAnyScope fix.	4 weeks ago
Your Name	579a581de8	test: add admin access and API scope security tests (360 total) Security/AdminAccessTest: verifies non-admin users are blocked from all admin web routes (dashboard, users, reports, settings, instances, curated onboarding) and admin API endpoints. Security/ApiScopeSecurityTest: verifies read-only tokens cannot write (follow, favourite, delete, mute, block), write tokens can read+write, cross-user access is denied, and private statuses are protected. BUG FOUND: CheckForAnyScope middleware (referenced in v1/admin routes) was removed in Passport 13. All /api/v1/admin/* routes throw BindingResolutionException. 6 tests skipped pending fix.	4 weeks ago

Author

SHA1

Message

Date

Your Name

c0cde2f682

refactor: move 52 legacy models from App\ to App\Models\

Move all Eloquent models from the app/ root directory to app/Models/
for consistency with modern Laravel conventions. The project already had
54 models in App\Models; this migrates the remaining 52 legacy models.

Changes:
- Move 52 model files from app/ to app/Models/
- Update namespace declarations in each model
- Update all ~1000 import references across the codebase
- Add Relation::morphMap() in AppServiceProvider for backward
  compatibility with existing polymorphic database records
- Add missing HasSnowflakePrimary imports for models that relied
  on same-namespace resolution

Your Name

9f81a5b425

test: un-skip Passport scope tests now that middleware is fixed

All v1 admin route security tests now pass with proper assertions
after the CheckForAnyScope → CheckTokenForAnyScope fix.

Your Name

579a581de8

test: add admin access and API scope security tests (360 total)

Security/AdminAccessTest: verifies non-admin users are blocked from
  all admin web routes (dashboard, users, reports, settings, instances,
  curated onboarding) and admin API endpoints.

Security/ApiScopeSecurityTest: verifies read-only tokens cannot write
  (follow, favourite, delete, mute, block), write tokens can read+write,
  cross-user access is denied, and private statuses are protected.

BUG FOUND: CheckForAnyScope middleware (referenced in v1/admin routes)
  was removed in Passport 13. All /api/v1/admin/* routes throw
  BindingResolutionException. 6 tests skipped pending fix.

3 Commits (ce4343e3e26073abd0d9107e7ca02bd8799eba03)