4 commits

Author	SHA1	Message	Date
rcourtman	b5757c38fd	Harden security handlers and apprise execution	2026-03-28 11:03:16 +00:00
rcourtman	a55bdb7a3a	feat(api): security and metrics history improvements ... - Require admin + settings:write scope for setup-script-url endpoint - Add license enforcement for long-term metrics (30d/90d require Pro) - Add downsampling step calculation for metrics history queries - Add isContainerSSHRestricted helper for SSH restriction checks - Clean up temperature proxy references from config handlers - Minor OIDC and rate limit improvements	2026-01-22 00:44:12 +00:00
rcourtman	51582b2d41	test: Add edge case test for addQueryParam URL parse error ... Add test case for URL containing control character (null byte) which triggers url.Parse error and returns path unchanged. Coverage improved from 88.9% to 100%.	2025-12-01 23:08:36 +00:00
rcourtman	c4d16b75dd	test: Add tests for OIDC handler utility functions ... - sanitizeOIDCReturnTo: path validation, protocol-relative URL rejection - addQueryParam: URL building, encoding, fragment preservation - extractStringClaim: type handling (string, []string, []interface{}) - extractStringSliceClaim: slice extraction with comma/space splitting - matchesValue: case-insensitive value matching - matchesDomain: email domain validation with @ handling - intersects: set intersection with case normalization - buildRedirectURL: proxy header handling (X-Forwarded-Proto/Host) Coverage: api 26.7% → 27.7%	2025-12-01 13:56:38 +00:00