Chris CoutinhoandClaude Opus 4.7 b3a7587f1a fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users ...

428 (Precondition Required, RFC 6585) is the correct semantic — the
request requires the client to complete a prerequisite step (Login Flow
v2 provisioning) before retrying. 412 (Precondition Failed) is for
header-based preconditions like ETags / If-Match.

No behavior change beyond the status code; same JSON payload.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-04 00:15:55 +02:00

..

api

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

client

refactor(search): address PR #750 round 7 review feedback

2026-05-01 21:15:39 +02:00

providers

feat: Add OpenAI provider support for embeddings and generation

2025-11-23 00:33:32 +01:00

search

refactor(search): address PR #750 round 12 review feedback

2026-05-02 00:26:06 +02:00

__init__.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

conftest.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_app_password_storage.py

test: Add comprehensive tests for app password storage and provisioning

2026-01-13 21:44:23 +01:00

test_auth_tools.py

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

test_basic_auth_middleware.py

fix(config): address reviewer feedback

2025-12-20 21:16:17 +01:00

test_browser_oauth_routes.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_browser_oauth_xss.py

fix(auth): address PR #758 round-3 review

2026-05-02 22:40:06 +02:00

test_browser_sessions.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_client_registry.py

feat(auth): drop test-client defaults, add ALLOWED_MGMT_CLIENT allowlist

2026-04-30 01:20:21 +02:00

test_config_paths.py

test: address PR #707 reviewer feedback on config path helpers

2026-04-14 21:14:42 +02:00

test_config_validators.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_dcr_proxy.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_deck_server.py

fix(deck): address PR #759 round-3 review feedback

2026-05-03 01:09:54 +02:00

test_document_chunker.py

fix: Add async/await, PDF metadata, and type safety fixes

2025-11-20 02:37:07 +01:00

test_document_processor_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_elicitation.py

fix(auth): address PR #757 round-2 review feedback

2026-05-02 16:33:43 +02:00

test_hybrid_auth_setup.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_id_token_verification.py

fix(auth): address PR #758 round-4 review

2026-05-03 00:57:12 +02:00

test_instrument_tool.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_logging_filter.py

chore: Remove /health and /metrics endpoints from logging

2025-11-10 02:07:45 +01:00

test_login_flow.py

fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup

2026-03-30 08:51:41 +02:00

test_management_app_password_endpoints.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_management_apps_endpoint.py

fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users

2026-05-04 00:15:55 +02:00

test_management_chunk_context_endpoint.py

test: tighten regression guard and hoist httpx import

2026-04-22 20:26:41 +02:00

test_management_pdf_preview_endpoint.py

fix(api): use stored app password for chunk-context and pdf-preview

2026-04-22 19:50:13 +02:00

test_management_status_endpoint.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

test_nutrition_model.py

address review: exclude bool from coercion, parameterize tests over all fields

2026-04-14 23:02:56 +00:00

test_oauth_callback_session_cleanup.py

fix(auth): address PR #758 round-6 medium/low review

2026-05-03 13:03:49 +02:00

test_oauth_logout.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_oauth_tools_signatures.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_offline_access_detection.py

fix: conditionally include offline_access based on IdP discovery

2026-04-07 23:48:49 +02:00

test_oidc_discovery.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_origin_normalise.py

fix(auth): address PR #758 round-3 final review

2026-05-02 23:14:07 +02:00

test_progress_notification.py

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

test_provision_routes.py

fix: require bearer token on provision endpoints (open redirect mitigation)

2026-03-31 17:09:37 +02:00

test_response_models.py

fix(models): coerce Contact.birthday + relax Table.owner_display_name

2026-04-26 17:14:08 +02:00

test_safe_next_url.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_scope_authorization_stored.py

fix(auth): invalidate scope cache on web/REST provisioning paths

2026-05-02 16:59:53 +02:00

test_scope_decorator.py

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

test_scope_prefix.py

fix: address second round of PR review for scope prefix

2026-04-07 16:58:29 +02:00

test_ssl_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_stdio.py

fix: address second round of review feedback

2026-04-07 23:26:46 +02:00

test_token_broker.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_token_utils_user_id.py

fix(auth): fail closed on missing sub claim, delete Flow 2 callback session

2026-05-02 19:46:36 +02:00

test_unified_verifier.py

feat(auth): drop test-client defaults, add ALLOWED_MGMT_CLIENT allowlist

2026-04-30 01:20:21 +02:00

test_webhook_endpoint.py

fix(webhooks): escape HTML in error responses, compare bearer as bytes

2026-04-30 14:17:45 +02:00

test_webhook_parser.py

fix(webhooks): authenticate deliveries via WEBHOOK_SECRET; review nits

2026-04-30 03:50:28 +02:00

test_webhook_presets.py

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

test_webhook_routes_register.py

refactor(webhooks): address PR review on auth-pass

2026-04-30 04:02:26 +02:00

test_webhook_routes_xss.py

fix(webhooks): escape HTML in error responses, compare bearer as bytes

2026-04-30 14:17:45 +02:00

test_webhook_storage.py

feat(ollama): Pull model on startup if not available in ollama

2025-11-12 00:37:26 +01:00

test_webhook_uri.py

refactor(webhooks): bound queue waits, route URLs through dynaconf

2026-04-30 04:17:00 +02:00

test_webhooks_api_auth.py

fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users

2026-05-04 00:15:55 +02:00