chihlasm 3e0fb92012 fix: critical security hardening (Phase A permissions audit) ...

- Remove role field from UserCreate schema, hardcode 'engineer' at registration
- Escape all user content in HTML export with html.escape() (XSS fix)
- Add field_validator to reject default SECRET_KEY when DEBUG=False
- Add CHECK constraint on users.role ('engineer'|'viewer') + migration 011
- Fix test_admin fixture to properly grant is_super_admin via ORM
- Fix circular FK (users↔invite_codes) in test DB setup with DROP SCHEMA CASCADE
- Add 5 new security tests (role validation + XSS prevention)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-05 22:04:37 -05:00

..

conftest.py

fix: critical security hardening (Phase A permissions audit)

2026-02-05 22:04:37 -05:00

test_auth.py

fix: critical security hardening (Phase A permissions audit)

2026-02-05 22:04:37 -05:00

test_sessions.py

fix: critical security hardening (Phase A permissions audit)

2026-02-05 22:04:37 -05:00

test_trees.py

Complete integration test suite with role-based auth fixes

2026-01-27 20:38:43 -05:00