maziggy b7d7c82501 fix(security): WebSocket auth gate + audit-driven hardening sweep

2026-06-02 10:02:17 +02:00

..

__init__.py

…

test_advanced_auth_api.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_ams_history_api.py

…

test_ams_labels_api.py

…

test_api_key_cloud_access.py

fix(api-keys): slice + slicer-presets routes resolve cloud token via key owner (#1182 follow-up)

2026-05-02 08:10:47 +02:00

test_archive_purge_api.py

fix(archives): bulk and auto purge now honour the soft / hard delete choice from #1343 (#1390 follow-up)

2026-05-17 10:54:28 +02:00

test_archives_api.py

fix(archives): handle fallback archives in source-3MF upload (#1531)

2026-05-26 11:04:46 +02:00

test_auth_api.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_auth_apikey_rbac.py

fix(security): GHSA-r2qv-8222-hqg3 — allowlist API-key permissions (CVSS 9.9)

2026-06-02 08:28:24 +02:00

test_available_filaments.py

…

test_background_dispatch_api.py

fix(dispatch): clean up transient library upload from Direct-Print flow (#730)

2026-04-21 14:10:04 +02:00

test_camera_api.py

feat(camera): in-app diagnostic for "Connection lost" (#1395 follow-up)

2026-05-18 10:52:02 +02:00

test_client_ip.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_cloud_auth.py

Post work PR #1013

2026-04-18 12:39:07 +02:00

test_color_catalog_extras.py

feat(inventory): multi-colour gradients, transparency, visual effects (#1154)

2026-04-29 09:13:33 +02:00

test_color_map_api.py

refactor(colors): color_catalog is the single source of truth (#857)

2026-04-11 12:10:45 +02:00

test_cost_statistics.py

fix(cost): top-up untracked filament at default rate so multi-color

2026-05-15 15:43:37 +02:00

test_discovery_api.py

…

test_endpoint_auth.py

…

test_external_folders_api.py

fix(security): WebSocket auth gate + audit-driven hardening sweep

2026-06-02 10:02:17 +02:00

test_external_links_api.py

…

test_filaments_api.py

…

test_gcode_viewer.py

fix(docker): copy gcode_viewer assets into the production image (issue #1218)

2026-05-06 14:23:39 +02:00

test_github_backup_api.py

security(github-backup): refuse to save against a non-private repository

2026-05-17 15:30:05 +02:00

test_groups_api.py

feat(auth): permission-delegated Settings + Group editor routes; fix group-edit cache stale-read (#1083)

2026-04-22 19:10:18 +02:00

test_inventory_assign.py

fix(inventory): break the Reset-Slot deadlock on A1 Mini BMCU / P1S Standard AMS (#1322)

2026-05-15 10:33:38 +02:00

test_labels.py

fix(labels): replace incorrect ams_30x15 preset with correct AMS holder sizes (#1426)

2026-05-19 13:14:03 +02:00

test_ldap_group_sync.py

fix(auth): preserve manually-assigned groups across LDAP logins (#1292)

2026-05-12 16:12:58 +02:00

test_ldap_provision.py

chore(tests): allowlist GitGuardian-flagged test fixtures in test_ldap_provision

2026-05-15 12:15:39 +02:00

test_library_api.py

fix(library): reject FAT32-illegal filename chars at rename/upload/queue time (#1540)

2026-05-27 09:54:07 +02:00

test_library_slice_api.py

fix(archives): cross-model re-slice no longer carries source printer_id

2026-05-23 14:25:12 +02:00

test_library_trash_api.py

Tool: Bandit B108

2026-05-11 13:30:27 +02:00

test_long_lived_tokens_api.py

feat(#1108): long-lived camera-stream tokens + fix(#1089) audit-pass tweaks

2026-04-25 10:44:37 +02:00

test_maintenance_api.py

…

test_metrics_api.py

…

test_mfa_api.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_notifications_api.py

…

test_obico_api.py

fix(obico): revert POST-bytes approach — Obico /p/ is GET-only

2026-04-18 08:50:46 +02:00

test_oidc_icon_api.py

Post work PR #1333

2026-05-15 08:57:03 +02:00

test_oidc_icon_blob_roundtrip.py

feat(auth): proxy OIDC provider icons server-side (#1333) (#1342)

2026-05-15 08:50:37 +02:00

test_oidc_icon_deferred_load.py

feat(auth): proxy OIDC provider icons server-side (#1333) (#1342)

2026-05-15 08:50:37 +02:00

test_oidc_relogin.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_ownership_permissions.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_pending_upload_display_name.py

Tool: Bandit B108

2026-05-11 13:30:27 +02:00

test_print_lifecycle.py

fix(scheduler): raise plate-clear gate for every terminal status (#1171)

2026-05-01 08:13:52 +02:00

test_print_queue_api.py

fix(queue): insufficient-filament warning now fires on every dispatch path (#1496)

2026-05-23 08:47:46 +02:00

test_printers_api.py

fix(#1420): negative-cache cover 404s, add GitHub rate-limit backoff

2026-05-19 12:11:22 +02:00

test_projects_api.py

fix(projects): portal-mounted hover preview for cover thumbnails (#1155)

2026-05-01 13:23:59 +02:00

test_security_headers.py

fix(csp): nonce-based script-src so Cloudflare-injected scripts pass (#1460 follow-up)

2026-05-23 12:28:58 +02:00

test_security.py

fix(security): GHSA-6mf4-q26m-47pv — fail-closed on auth-probe DB errors (CVSS 9.8)

2026-05-30 13:49:09 +02:00

test_settings_api_key_scrubbing.py

fix(spoolbuddy): lower /update permission to INVENTORY_UPDATE so kiosk's own Settings -> Update button works

2026-05-08 14:28:41 +02:00

test_settings_api.py

Add configurable default print options (#858)

2026-04-01 10:30:05 +02:00

test_settings_electricity_price.py

fix(api-keys): expose narrowly-scoped "Update electricity price" toggle (#1356)

2026-05-15 13:12:41 +02:00

test_settings_ui_preferences.py

fix(settings): expose UI rendering fields without requiring SETTINGS_READ (#1293)

2026-05-12 16:30:28 +02:00

test_sjf_scheduling.py

chore(tests): suppress B108 on dummy /tmp test fixtures

2026-04-19 09:48:10 +02:00

test_smart_plugs_api.py

…

test_spool_reset_usage.py

fix(inventory): "Reset usage to 0" preserves remaining in both modes (#1390)

2026-05-18 08:51:27 +02:00

test_spoolbuddy_spoolman_nfc.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolbuddy.py

fix(spoolbuddy): route weight sync by inventory mode exclusively (#1530)

2026-05-26 10:36:37 +02:00

test_spoolman_ams_sync.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_api.py

fix(spoolman): decide spool assignability from the slot-assignment ledger, not extra.tag (#1122)

2026-05-21 09:33:47 +02:00

test_spoolman_filament_patch.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_inventory_api.py

fix(spoolman): edit-spool patches the linked filament in place when singleton (#1357 follow-up)

2026-05-18 11:35:10 +02:00

test_spoolman_k_profiles.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_slot_assignment_mqtt.py

fix(spoolman): clear stale fallback-tag links on assign + link, prefer slot-assignment over tag-link in UI (#1457)

2026-05-20 11:00:54 +02:00

test_spoolman_slot_assignments.py

fix(spool-assignments): union both assignment tables in the missing-spool check + symmetric mode-switch clear (#1473)

2026-05-21 09:15:10 +02:00

test_spoolman_slot_concurrency.py

fix(spoolman): clear stale fallback-tag links on assign + link, prefer slot-assignment over tag-link in UI (#1457)

2026-05-20 11:00:54 +02:00

test_spoolman_tracking_slot_fallback.py

fix(spoolman): per-print weight tracker falls back to local slot-assignment table for tag-less spools (#1459)

2026-05-20 11:16:56 +02:00

test_static_html_cache_headers.py

fix(tests): make SPA cache-header tests work without a built frontend

2026-05-05 14:35:08 +02:00

test_support_api.py

feat(system): log-health scanner + Add/Edit-Printer setup pre-flight

2026-05-22 16:31:16 +02:00

test_system_api.py

feat(system): log-health scanner + Add/Edit-Printer setup pre-flight

2026-05-22 16:31:16 +02:00

test_tailscale_api.py

feat(virtual-printer): add Tailscale opt-out toggle (closes #701 point 3) (#1070)

2026-04-24 09:59:09 +02:00

test_trace_middleware.py

feat(observability): trace ID column on every log line + X-Trace-Id header

2026-04-26 10:01:17 +02:00

test_updates_api.py

Merge branch 'main' into dev

2026-05-19 14:12:50 +02:00

test_user_notifications_api.py

…

test_users_auth_cleanup.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_virtual_printer_api.py

feat(virtual-printer): setup diagnostic + one-click slicer-certificate export

2026-05-22 13:24:35 +02:00

test_webhook_start_print.py

● fix(vp-queue): inherit slicer print options instead of always using defaults (#1403)

2026-05-18 09:38:53 +02:00