busya 2bc8ad87e1 security: rate limiter, is_admin flag, password policy, log masking ...

M-3: Role.name == 'Admin' string comparison → Role.is_admin boolean flag.
  Admin role created with is_admin=True. has_permission checks getattr(role,
  'is_admin', False) instead of comparing role names.

M-2: In-memory rate limiter on /api/auth/login. Tracks failed attempts
  per IP (10 in 5 min window, 15 min ban). Thread-safe via threading.Lock.

M-5: Password policy — UserCreate.password: min_length=8, must include
  uppercase, lowercase, and digit.

L-1: log_security_event details dict now masks sensitive fields:
  password, secret, token, api_key, authorization. Recursive masking
  for nested dicts. Sensitive field names matched via regex.

OTHER:
- 4 rate limiter tests (under limit, ban, success clears, IP isolation)
- 4 password policy tests (too short, no upper, no digit, valid)
- 2 log masking tests (flat keys, nested)

2026-05-26 15:17:19 +03:00

..

core

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

fixtures

feat(clean-release): complete compliance redesign phases and polish tasks T047-T052

2026-03-10 09:11:26 +03:00

scripts

semantics

2026-05-26 09:30:41 +03:00

services

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

conftest.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_api_key_auth.py

feat(auth): implement API key authentication and management

2026-05-25 11:35:27 +03:00

test_api_key_model.py

feat(auth): implement API key authentication and management

2026-05-25 11:35:27 +03:00

test_api_key_routes.py

feat(auth): implement API key authentication and management

2026-05-25 11:35:27 +03:00

test_auth.py

semantics

2026-05-26 09:30:41 +03:00

test_constants_audit_fixes.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_core_scheduler.py

fix(maintenance): auto-expiry + adaptive markdown height + tests

2026-05-25 08:36:33 +03:00

test_dashboards_api.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_datasets.py

semantics

2026-05-26 09:30:41 +03:00

test_deprecation_audit_fixes.py

semantic

2026-05-20 23:54:53 +03:00

test_layout_utils.py

feat: GRACE-Poly protocol optimization — ~3200→10 warnings (↓99.7%)

2026-05-26 11:14:25 +03:00

test_log_persistence.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_logger.py

feat: GRACE-Poly protocol optimization — ~3200→10 warnings (↓99.7%)

2026-05-26 11:14:25 +03:00

test_logging_audit_fixes.py

semantics

2026-05-26 09:30:41 +03:00

test_maintenance_api.py

feat(auth): implement API key authentication and management

2026-05-25 11:35:27 +03:00

test_maintenance_service.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_models.py

semantics

2026-05-26 09:30:41 +03:00

test_resource_hubs.py

semantics

2026-05-26 09:30:41 +03:00

test_security_audit_fixes.py

semantic

2026-05-20 23:54:53 +03:00

test_security_orthogonal.py

security: rate limiter, is_admin flag, password policy, log masking

2026-05-26 15:17:19 +03:00

test_smoke_app.py

semantics

2026-05-26 09:30:41 +03:00

test_smoke_plugins.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_sql_table_extractor.py

semantics

2026-05-26 09:30:41 +03:00

test_storage_audit_fixes.py

fix(maintenance): auto-expiry + adaptive markdown height + tests

2026-05-25 08:36:33 +03:00

test_storage_config.py

fix(maintenance): auto-expiry + adaptive markdown height + tests

2026-05-25 08:36:33 +03:00

test_task_manager.py

semantics

2026-05-26 09:30:41 +03:00

test_task_persistence.py

security: critical auth fixes, test migration to SQLite+FK, 44 test fixes

2026-05-26 14:58:49 +03:00

test_translate_corrections.py

semantics

2026-05-26 09:30:41 +03:00

test_translate_executor_filter.py

chore(lint): apply ruff --fix (4443 auto-fixes)

2026-05-14 11:20:17 +03:00

test_translate_history.py

semantics

2026-05-26 09:30:41 +03:00

test_translate_jobs.py

semantics

2026-05-26 09:30:41 +03:00

test_translate_scheduler_execution.py

chore(lint): apply ruff --fix (4443 auto-fixes)

2026-05-14 11:20:17 +03:00

test_translate_scheduler_guard.py

chore(lint): apply ruff --fix (4443 auto-fixes)

2026-05-14 11:20:17 +03:00

test_translate_scheduler.py

semantics

2026-05-26 09:30:41 +03:00