Chris CoutinhoandClaude Opus 4.8 a53e6e7721 test(auth): cover userinfo SSRF scheme guard; note empty-scope caveat ...

Address claude-review round 7 nits on #919:
- Add test_validate_via_userinfo_rejects_non_http_scheme — a non-http(s)
  userinfo_uri is refused before any request (covers the SSRF scheme guard).
- Docstring caution on _validate_via_userinfo: userinfo-validated tokens carry
  empty scopes, so management endpoints must not gate on scopes for this path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-17 20:34:31 +02:00

..

auth

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

client

Merge pull request #832 from Janhouse/fix/830-external-calendars

2026-06-15 06:34:16 +02:00

contract

test(contract): tidy the purge provider-state no-op stub

2026-06-16 16:57:19 +02:00

fixtures

fix(document-processors): correct cascade escalation metric + review nits

2026-06-16 20:17:56 +02:00

integration

refactor(vector-sync): clear SonarCloud gate + round-2 nits

2026-06-12 10:08:18 +02:00

load

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

rag_evaluation

feat: Add OpenAI provider support for embeddings and generation

2025-11-23 00:33:32 +01:00

server

test(deck): address PR #872 round-2 review

2026-06-07 18:25:56 +02:00

smoke

refactor: remove oauth profile, migrate MCP/OAuth tests to login-flow

2026-04-01 16:05:14 +02:00

unit

test(auth): cover userinfo SSRF scheme guard; note empty-scope caveat

2026-06-17 20:34:31 +02:00

__init__.py

ci: fix imports

2025-10-24 01:04:30 +02:00

conftest.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

test_cli.py

refactor(worker): trim observability helper docstring; clarify test fake

2026-06-11 05:45:47 +02:00

test_models.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00