ochenstarik/randomayzer
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
randomayzer/tests
History
Ochenstarik ef8360bd4b fix(security): enforce pre-auth rate limit before session store lookup (Task 15)
2026-08-22 21:20:27 +07:00
..
integration fix(storage): Task 09 ensure eligibleParticipantsCount parity between Memory and Prisma repository drivers 2026-08-21 19:37:41 +07:00
api-validation.test.ts fix(draw): Phase 2.4 enforce seed pre-commit at snapshot lock to prevent grinding 2026-08-20 17:24:07 +07:00
auth-guard.test.ts fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22 2026-08-21 22:49:37 +07:00
auth-security.test.ts Phase 2.3.1: token refresh correctness gate 2026-08-18 14:37:09 +07:00
client-ip-resolver.test.ts feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation 2026-08-18 02:22:54 +07:00
concurrency-draw-100.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
concurrency-draw.test.ts fix(snapshot): Phase 2.4.1 enforce atomic snapshot lock, single lock invariant and direct seed commitment binding 2026-08-20 18:23:48 +07:00
concurrency-participants-snapshot.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
concurrency-snapshot.test.ts feat(auth): Phase 2.2.2 Authorization Ownership Invariant Fix - strict requireGiveawayOwner null check, Prisma non-null organizerId with onDelete Restrict, repository non-null organizer invariant, migration documentation, and regression tests 2026-08-18 11:28:18 +07:00
concurrency.test.ts chore: Task 11 dead code cleanup and capability validation unification 2026-08-21 19:49:16 +07:00
duplicate-comments-rule.test.ts fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22 2026-08-21 22:49:37 +07:00
effective-capabilities-truthfulness.test.ts fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview 2026-08-21 22:32:27 +07:00
filter-engine.test.ts test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage 2026-08-18 00:24:00 +07:00
fisher-yates.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
fsm.test.ts feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00
giveaway-listing-idor.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
idempotency-hardening.test.ts feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation 2026-08-18 02:22:54 +07:00
idempotency.test.ts feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation 2026-08-18 02:22:54 +07:00
oauth-concurrency.test.ts feat(security): Phase 2.2.3 Final Auth Security Gate - fix GET /api/giveaways IDOR, scoped DB query, Prisma ownership migration, atomic OAuth consumeTransaction, trusted production origin, rate limiting, and comprehensive security tests 2026-08-18 12:02:39 +07:00
oauth-security-gate.test.ts feat(security): Phase 2.2.1 Critical AuthZ & Credential Security - centralized ownership guards, protected giveaway mutations, safe redirect validator, CSRF defenses, TokenVault production fail-fast, and comprehensive security tests 2026-08-18 03:08:02 +07:00
origin-and-csrf-gate.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
participant-pipeline.test.ts test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage 2026-08-18 00:24:00 +07:00
payload-scalability.test.ts feat(auth): Phase 2.2.2 Authorization Ownership Invariant Fix - strict requireGiveawayOwner null check, Prisma non-null organizerId with onDelete Restrict, repository non-null organizer invariant, migration documentation, and regression tests 2026-08-18 11:28:18 +07:00
payload-summary-regression.test.ts chore: Task 11 dead code cleanup and capability validation unification 2026-08-21 19:49:16 +07:00
persistence.test.ts fix(snapshot): Phase 2.4.1 enforce atomic snapshot lock, single lock invariant and direct seed commitment binding 2026-08-20 18:23:48 +07:00
persistent-auth-stores.test.ts feat(auth): Task 01 add persistent OAuthTransaction and Session Prisma stores 2026-08-21 17:53:38 +07:00
post-preview-guard.test.ts fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview 2026-08-21 22:32:27 +07:00
pre-auth-rate-limit.test.ts fix(security): enforce pre-auth rate limit before session store lookup (Task 15) 2026-08-22 21:20:27 +07:00
preview-quota-policy.test.ts fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview 2026-08-21 22:32:27 +07:00
proof-separation.test.ts feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite 2026-08-18 00:15:30 +07:00
provider-capabilities.test.ts chore: Task 11 dead code cleanup and capability validation unification 2026-08-21 19:49:16 +07:00
provider-safety.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
public-verification.test.ts feat(public): Task 06 implement public giveaway verification endpoint and page 2026-08-21 19:11:03 +07:00
randomizer.test.ts feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation 2026-08-18 02:22:54 +07:00
rate-limit-identity.test.ts fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview 2026-08-21 22:32:27 +07:00
rate-limiter.test.ts feat(core): Phase 1.4 Production Hardening - double draw atomic protection, snapshot concurrency safety, Zod API validation, payload scalability & pagination, provider safety, normalized errors, idempotency, rate limiting, and 20 concurrent draw integration tests 2026-08-18 01:54:35 +07:00
security.test.ts fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22 2026-08-21 22:49:37 +07:00
seed-precommit-gate.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
snapshot-binding.test.ts fix(snapshot): Phase 2.4.1 enforce atomic snapshot lock, single lock invariant and direct seed commitment binding 2026-08-20 18:23:48 +07:00
snapshot-immutability.test.ts feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00
snapshot-seed-atomicity.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
snapshot-unlock.test.ts feat(api): Task 04 implement safe atomic snapshot unlock SNAPSHOT_LOCKED -> READY 2026-08-21 19:01:26 +07:00
storage-driver.test.ts feat(api): Task 04 implement safe atomic snapshot unlock SNAPSHOT_LOCKED -> READY 2026-08-21 19:01:26 +07:00
subscription-enrichment.test.ts feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00
summary-count-parity.test.ts fix(storage): Task 09 ensure eligibleParticipantsCount parity between Memory and Prisma repository drivers 2026-08-21 19:37:41 +07:00
tampering-verification.test.ts feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite 2026-08-18 00:15:30 +07:00
token-refresh-concurrency.test.ts Phase 2.3.1: token refresh correctness gate 2026-08-18 14:37:09 +07:00
token-refresh-correctness-gate.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
token-vault.test.ts docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks 2026-08-21 08:44:34 +07:00
ui-error-parser.test.ts fix(ui): Task 10 improve UI error handling, remove alerts and handle unauthenticated state 2026-08-21 19:45:30 +07:00
unbiased-sampler.test.ts feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00
verification-api.test.ts feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite 2026-08-18 00:15:30 +07:00
vk-auth-resolver.test.ts feat(vk): Phase 2.3 Authenticated VK Organizer Integration - VkAuthContextResolver, single-flight token refresh mutex, controlled user token fallback, runtime capabilities, and test suite 2026-08-18 13:04:57 +07:00
vk-client-integration.test.ts feat(vk): Phase 2.1 Real VK Client Foundation - dedicated VkClient with typed errors, exponential backoff, rate limiting, token security, full pagination, and documentation 2026-08-18 02:31:39 +07:00
vk-correctness-gate.test.ts fix(ui): Task 10 improve UI error handling, remove alerts and handle unauthenticated state 2026-08-21 19:45:30 +07:00
vk-errors.test.ts feat(vk): Phase 2.1.1 VK Client Correctness & Official VK Contract Alignment - separated timeout vs cancellation state with VkCancelledError, HTTP vs VK error separation based on VKCOM/vk-api-schema, listener cleanup, pagination truncation guards, and VK_METHOD_CAPABILITIES documentation 2026-08-18 02:38:43 +07:00
vk-mock-provider.test.ts test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage 2026-08-18 00:24:00 +07:00
vk-parser.test.ts feat: initial commit - VK Giveaway Randomizer Phase 1 2026-08-17 23:34:49 +07:00
vk-provider-authenticated.test.ts feat(vk): Phase 2.3 Authenticated VK Organizer Integration - VkAuthContextResolver, single-flight token refresh mutex, controlled user token fallback, runtime capabilities, and test suite 2026-08-18 13:04:57 +07:00
winner-count-contract.test.ts chore: Task 11 dead code cleanup and capability validation unification 2026-08-21 19:49:16 +07:00