aaribaud/ESPSomfy-RTS
0
0
Fork 0
mirror of https://github.com/rstrouse/ESPSomfy-RTS.git synced 2026-10-31 13:52:15 +01:00
Code Issues Projects Releases Packages Wiki Activity
ESPSomfy-RTS/test
History
cjkas ecb0260f61 feat!: the token on every route, Secure Config Only goes (step 4b) 
Under Secured every HTTP route but the public ones needs the token
(docs/adr/0006-two-security-modes-eleven-http-routes.md):
- isPublicRoute, isWebAsset and originMatchesHost in src/HttpAccess.h,
  with native tests.
- One middleware checks the token. It runs once the body is in, so
  /restore, /updateFirmware and /updateApplication check it on their
  first chunk and drop a refused upload.
- Static serving answers the web UI's files only: shades.cfg and
  shades.tmp are no longer served.
- The wildcard CORS headers go; WEB_CORS turns them back on for UI work
  from file://.
- The socket refuses a handshake whose Origin doesn't name its Host.
- "Secure Config Only" goes: a device set to it is Secured, and
  /loginContext drops permissions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 23:03:59 +01:00
..
e2e feat!: the token on every route, Secure Config Only goes (step 4b) 2026-10-27 23:03:59 +01:00
fixtures/proto2 fix: deletes send their removal after the reply; test_reboot waits for the restart 2026-10-25 13:07:17 +01:00
js fix: web UI review findings (step 2b) 2026-10-25 20:43:09 +01:00
stubs fix: only touch the task watchdog from tasks that are subscribed to it 2026-10-21 13:45:04 +02:00
test_apitoken feat: sign tokens with a secret key, compare them in constant time 2026-10-27 19:41:43 +01:00
test_configheader fix: stop the 5 s boot wait, tell the client about a bad restore 2026-10-19 18:08:16 +02:00
test_ethphy feat: keep Ethernet settings independent of the framework 2026-10-19 21:13:49 +02:00
test_frame fix: turn a group's sun flag on, not off, for MQTT sunFlag 1 2026-10-12 20:55:21 +02:00
test_httpaccess feat!: the token on every route, Secure Config Only goes (step 4b) 2026-10-27 23:03:59 +01:00
test_itemsnapshot feat!: remove the old API, ports 8081 and 8080 (step 4a) 2026-10-27 21:49:38 +01:00
test_json feat: socket protocol 2 core on ws://host/ws 2026-10-24 11:03:07 +02:00
test_logging refactor: time steps with ElapsedTimer::lap() 2026-10-13 15:39:14 +02:00
test_loginthrottle fix: review findings on the login throttle 2026-10-27 18:44:39 +01:00
test_loopqueue feat!: remove the old API, ports 8081 and 8080 (step 4a) 2026-10-27 21:49:38 +01:00
test_modeleditor fix: deletes send their removal after the reply; test_reboot waits for the restart 2026-10-25 13:07:17 +01:00
test_motion fix: default a set-favorite request's tilt to the favorite tilt 2026-10-14 15:57:49 +02:00
test_mqttcommands refactor: split the transports into the modules GLOSSARY.md names 2026-10-16 13:47:56 +02:00
test_proto fix: settings ops review findings 2026-10-25 10:27:53 +01:00
test_protoassembly fix: edit ops review findings 2026-10-24 18:10:06 +02:00
test_protoedits fix: edit ops second review findings 2026-10-24 18:29:34 +02:00
test_protoops fix: edit ops second review findings 2026-10-24 18:29:34 +02:00
test_protosettings fix: drop Secure Config Only permissions from protocol 2 2026-10-25 11:11:19 +01:00
test_protoslots fix: protocol 2 core review findings 2026-10-24 13:17:15 +02:00
test_pulse refactor: move the RX pulse decoder into PulseDecoder 2026-10-13 21:21:05 +02:00
test_radioscheduler refactor: name radio jobs as GLOSSARY.md does 2026-10-13 15:13:03 +02:00
test_rollingcode test: cover the radio queue rules, shade TX state, rolling codes and web command hold 2026-10-12 20:26:33 +02:00
test_secrets fix: keep stored secrets when an older UI sends them empty 2026-10-18 20:07:31 +02:00
test_sensors fix: move only the tilt of a tilt-only shade for sun and wind 2026-10-13 21:14:20 +02:00
test_shadebehaviour docs: move open known issues to GitHub, drop the finished plans 2026-10-21 13:27:49 +02:00
test_shadechanges refactor: send shade and group changes once per loop() pass 2026-10-16 10:40:44 +02:00
test_shaderequests fix: command op replies that said ok when nothing was done 2026-10-24 13:46:00 +02:00
test_shadesettings refactor: hold shade settings in ShadeSettings and RemoteSettings 2026-10-16 20:31:39 +02:00
test_shadetx test: name the ticket tests as GLOSSARY.md does 2026-10-13 15:35:15 +02:00
test_taskwdt fix: only touch the task watchdog from tasks that are subscribed to it 2026-10-21 13:45:04 +02:00
test_txbuffer fix: keep a repeater frame until the radio queue takes it 2026-10-12 18:31:39 +02:00
test_txjob refactor: let one RadioScheduler own the radio job queue 2026-10-12 20:36:32 +02:00
test_utils fix: review fixes for step 4a 2026-10-27 22:11:54 +01:00