Chris CoutinhoandClaude Opus 4.8 be360edab0 fix(api): distinguish Nextcloud 5xx from auth failure; tighten body parse (#824) ...

Address PR #825 review round 2:
- _validate_nextcloud_credentials now only maps OCS HTTP 401/403 to a 401
  "invalid credential"; any other non-200 (5xx, 503 maintenance mode) surfaces
  as 502 "Nextcloud returned a server error" so ops don't chase a phantom bad
  password when Nextcloud is actually down.
- The client-facing 401 message is now a parameter, so delete_app_password keeps
  its "Invalid credentials" wording without unwrapping/rebuilding the helper's
  JSONResponse.
- Body parsing catches (ValueError, UnicodeDecodeError) instead of bare
  Exception, and guards body.get behind isinstance(body, dict) — no longer
  swallows RuntimeError/AttributeError or a non-object JSON body.
- Add a unit test asserting 500/503 -> 502.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-01 15:15:48 +02:00

..

admin

fix: address PR #814 review + SonarCloud gate

2026-05-29 18:36:42 +02:00

alembic

fix(storage): address PR #798 round-3 review (SonarQube + pool sizing + RETURNING test)

2026-05-16 19:33:23 +02:00

api

fix(api): distinguish Nextcloud 5xx from auth failure; tighten body parse (#824)

2026-06-01 15:15:48 +02:00

auth

fix(auth): authenticate stored app passwords with loginName, not UID

2026-05-31 21:34:05 +02:00

client

fix(auth): authenticate stored app passwords with loginName, not UID

2026-05-31 21:34:05 +02:00

controllers

fix: return all notes when search query is empty

2025-11-13 21:57:14 +01:00

document_processors

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

embedding

fix: stop S7632 flagging NOSONAR mentioned in prose comments

2026-05-31 21:38:14 +02:00

models

fix(calendar): preserve floating/TZID semantics across CalDAV roundtrip (#782)

2026-05-11 02:41:10 +02:00

observability

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

providers

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

search

Merge remote-tracking branch 'origin/master' into feat/decomp-hook-points

2026-05-29 18:31:05 +02:00

server

fix: PR #813 review — shared-file context in MCP tool path + viz over-fetch cap

2026-05-29 17:16:23 +02:00

utils

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

vector

Merge pull request #821 from cbcoutinho/fix/app-password-loginname-runtime-auth

2026-05-31 22:17:34 +02:00

__init__.py

Initial commit

2025-05-04 23:24:55 +02:00

acl_hash.py

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

app.py

fix: address PR #814 reviewer follow-ups

2026-05-31 19:42:09 +02:00

canonical.py

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

cli.py

feat(storage): pluggable database backend via DATABASE_URL (ADR-026)

2026-05-16 18:06:42 +02:00

config_validators.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

config.py

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

context.py

fix(auth): authenticate stored app passwords with loginName, not UID

2026-05-31 21:34:05 +02:00

http.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

migrations.py

fix(storage): address PR #798 round-4 review (NOSONAR syntax + pg_advisory_lock + engine dispose + nits)

2026-05-17 09:25:42 +02:00

stdio.py

fix: address third round of review feedback

2026-04-07 23:59:39 +02:00