pixelfed

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Your Name 579a581de8 test: add admin access and API scope security tests (360 total) Security/AdminAccessTest: verifies non-admin users are blocked from all admin web routes (dashboard, users, reports, settings, instances, curated onboarding) and admin API endpoints. Security/ApiScopeSecurityTest: verifies read-only tokens cannot write (follow, favourite, delete, mute, block), write tokens can read+write, cross-user access is denied, and private statuses are protected. BUG FOUND: CheckForAnyScope middleware (referenced in v1/admin routes) was removed in Passport 13. All /api/v1/admin/* routes throw BindingResolutionException. 6 tests skipped pending fix.	4 weeks ago
..
AdminAccessTest.php	test: add admin access and API scope security tests (360 total)	4 weeks ago
ApiScopeSecurityTest.php	test: add admin access and API scope security tests (360 total)	4 weeks ago

Your Name 579a581de8 test: add admin access and API scope security tests (360 total)

Security/AdminAccessTest: verifies non-admin users are blocked from
  all admin web routes (dashboard, users, reports, settings, instances,
  curated onboarding) and admin API endpoints.

Security/ApiScopeSecurityTest: verifies read-only tokens cannot write
  (follow, favourite, delete, mute, block), write tokens can read+write,
  cross-user access is denied, and private statuses are protected.

BUG FOUND: CheckForAnyScope middleware (referenced in v1/admin routes)
  was removed in Passport 13. All /api/v1/admin/* routes throw
  BindingResolutionException. 6 tests skipped pending fix.

AdminAccessTest.php

test: add admin access and API scope security tests (360 total)

ApiScopeSecurityTest.php

test: add admin access and API scope security tests (360 total)