rcourtman
b33cc3ac60
Hide admin operations from public demo
2026-04-11 17:20:58 +01:00
rcourtman
9c498b55c6
Prove demo commercial API preview redaction
...
Add backend regression coverage for the public-demo commercial route policy so monitored-system ledger reads, ledger preview/explain requests, and provider preview probes are hidden with the same generic 404 while adjacent platform list/add/test routes remain outside the commercial policy.
2026-04-09 09:55:54 +01:00
rcourtman
7c8fddd9f0
Retire legacy self-hosted checkout compatibility paths
2026-04-08 19:01:22 +01:00
rcourtman
c4f4a67f6c
Tighten self-hosted checkout handoff and auto-return
2026-04-07 18:12:47 +01:00
rcourtman
cc5ee2e24c
Split commercial posture from billing entitlements
2026-04-07 13:24:55 +01:00
rcourtman
f8ad57a1f2
Split runtime capabilities from commercial entitlements
2026-04-07 11:40:57 +01:00
rcourtman
0c1fafa800
Centralize demo commercial boundary policy
2026-04-07 10:24:53 +01:00
rcourtman
778a2577b6
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rcourtman
15906fa333
test: Add edge case for DemoModeMiddleware WebSocket POST upgrade
...
Tests WebSocket upgrade with POST method in demo mode, ensuring the
websocket check branch is exercised after the GET/HEAD/OPTIONS check.
Coverage: 90% to 100%.
2025-12-01 23:24:06 +00:00
rcourtman
9e056674cc
Add unit tests for DemoModeMiddleware (api)
...
26 test cases covering:
- Demo mode disabled (all requests pass through)
- Demo mode enabled with read-only methods (GET/HEAD/OPTIONS allowed)
- WebSocket upgrade handling (case-insensitive)
- Auth endpoint allowlist (login, OIDC, logout)
- Modification request blocking (POST/PUT/DELETE/PATCH)
- Partial path match rejection (security)
- Response format verification (JSON error response)
First test file for demo_middleware.go. Tests verify correct header
setting (X-Demo-Mode) and error response structure.
2025-11-30 13:34:08 +00:00
