Marcel c7782d554f test(auth): login response never leaks the password field ...

Pin the @JsonProperty(WRITE_ONLY) invariant on AppUser.password. If the
annotation is ever dropped — or a new field aliases the hash — the CI run that
ships the regression flags it the next morning rather than waiting for a
security review. Addresses PR #612 / Nora concern (regression test).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-17 22:40:41 +02:00

..

audit

perf(test): replace DirtiesContext(AFTER_EACH_TEST_METHOD) with @Transactional

2026-05-15 10:29:35 +02:00

auth

test(auth): login response never leaks the password field

2026-05-17 22:40:41 +02:00

config

fix(backend): switch to sentry-spring-boot-4:8.41.0 for Spring Boot 4/SF7 compatibility

2026-05-15 09:51:53 +02:00

dashboard

feat(stats): add totalStories to StatsDTO via GeschichteService.countPublished()

2026-05-08 15:56:47 +02:00

document

perf(test): replace DirtiesContext(AFTER_EACH_TEST_METHOD) with @Transactional

2026-05-15 10:29:35 +02:00

exception

test(exception): verify handleGeneric captures exception in Sentry and returns 500

2026-05-15 09:44:10 +02:00

filestorage

refactor(shared): move remaining services to domain packages (stats→dashboard, filestorage, importing, notification, exception)

2026-05-05 12:55:51 +02:00

geschichte

perf(test): replace DirtiesContext(AFTER_EACH_TEST_METHOD) with @Transactional

2026-05-15 10:29:35 +02:00

importing

fix(ci): pin semgrep version, add pip cache, harden rule severity

2026-05-17 16:18:03 +02:00

notification

refactor(shared): move remaining services to domain packages (stats→dashboard, filestorage, importing, notification, exception)

2026-05-05 12:55:51 +02:00

ocr

refactor(shared): move remaining services to domain packages (stats→dashboard, filestorage, importing, notification, exception)

2026-05-05 12:55:51 +02:00

person

perf(test): replace DirtiesContext(AFTER_EACH_TEST_METHOD) with @Transactional

2026-05-15 10:29:35 +02:00

security

feat(auth): delete AuthTokenCookieFilter and its test (ADR-020)

2026-05-17 19:27:53 +02:00

shared

test(archunit): add Rule 2 coverage for importing and audit domains

2026-05-05 17:59:08 +02:00

tag

refactor(security): move SecurityConfig to security/ package

2026-05-05 12:48:29 +02:00

user

test(invites): verify groupIds are forwarded from request body in InviteController

2026-05-14 19:26:53 +02:00

ActuatorPrometheusIT.java

fix(obs): add management security chain and split Prometheus IT tests

2026-05-16 15:46:45 +02:00

ActuatorSecurityTest.java

test(security): add ActuatorSecurityTest to guard auth boundaries

2026-05-17 12:45:28 +02:00

ApplicationContextTest.java

fix(backend): switch to sentry-spring-boot-4:8.41.0 for Spring Boot 4/SF7 compatibility

2026-05-15 09:51:53 +02:00

MigrationIntegrationTest.java

fix(db): add indexes on documents.sender_id and document_comments.author_id

2026-05-09 16:31:30 +02:00

PostgresContainerConfig.java

test(#119): add Testcontainers @DataJpaTest against real PostgreSQL 16

2026-03-28 16:26:30 +01:00