d58c43c7b5
🧪 Fix test_api_tokens syntax to avoid CI failures in older Python versions
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-16 09:39:41 +00:00
0425d46c44
style: apply ruff auto-fix
...
- Auto-formatted code with ruff format
- Applied ruff linting fixes with --fix
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-16 09:26:26 +00:00
f24c39a027
🧪 Add tests for api_tokens edge cases to improve coverage
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-16 09:26:04 +00:00
91855b0763
Merge pull request #643 from christianlouis/copilot/sub-pr-637
...
test: exercise real auth path in test_revoke_token_unauthenticated
2026-03-14 11:03:55 +01:00
9e9b1fb158
test: strengthen test_revoke_token_database_error to verify rollback is called
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-14 09:58:46 +00:00
751b16d804
test: clarify caller cleanup responsibility in _make_unauthenticated_client docstring
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-14 09:55:33 +00:00
96ef7d4769
test: exercise real auth path in test_revoke_token_unauthenticated
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-14 09:54:20 +00:00
fdf5053ace
test: add error path tests for API token revocation
...
- Enhanced existing tests for 400 (already revoked) and 404 (not found)
- Added test_revoke_token_unauthenticated (401)
- Added test_revoke_token_database_error (500 + rollback check)
- Added test_revoke_token_invalid_id_format (422)
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-14 09:41:38 +00:00
fc9caf4f9b
style: apply ruff auto-fix
...
- Auto-formatted code with ruff format
- Applied ruff linting fixes with --fix
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-08 20:39:10 +00:00
a7eff2c033
fix(security): address CodeQL clear-text logging and weak hashing alerts
...
- Convert f-string log interpolation to %s-style formatting in
app/api/pipelines.py and app/api/saved_searches.py to prevent
clear-text logging of request-derived data (CodeQL: clear-text
logging of sensitive information)
- Replace plain hashlib.sha256() with PBKDF2-HMAC-SHA256 via
hash_token() in app/auth.py for Bearer token verification,
consistent with how tokens are stored in api_tokens.py (CodeQL:
use of weak cryptographic hashing on sensitive data)
- Remove redundant {exc} from logger.exception() calls (the
traceback is already captured by logger.exception())
- Update test to verify PBKDF2 hash instead of plain SHA-256
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-08 19:33:55 +00:00
52ebbad335
Potential fix for code scanning alert no. 344: Use of a broken or weak cryptographic hashing algorithm on sensitive data
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-03-08 20:22:39 +01:00
c3bb93c197
feat(api): add personal API tokens and enhance webhook integration UI
...
- Add ApiToken model with SHA-256 hashed storage and usage tracking
- Create API token CRUD endpoints (POST/GET/DELETE /api/api-tokens/)
- Add Bearer token authentication to require_login decorator
- Exempt Bearer-authenticated requests from CSRF validation
- Add API tokens management page with create/revoke/copy UI
- Enhance webhook integration type with detailed explanation and code snippets
- Add navigation links (desktop + mobile) to API tokens page
- Include 19 tests covering CRUD, auth resolution, and utility functions
- Create migration 024_add_api_tokens
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-08 18:42:55 +00:00
google-labs-jules[bot]