Charon

Files

GitHub Actions c156183666 fix: Enhance security handler tests and implement role-based access control

- Added role-based middleware to various security handler tests to ensure only admin users can access certain endpoints.
- Created a new test file for authorization checks on security mutators, verifying that non-admin users receive forbidden responses.
- Updated existing tests to include role setting for admin users, ensuring consistent access control during testing.
- Introduced sensitive data masking in settings handler responses, ensuring sensitive values are not exposed in API responses.
- Enhanced user handler responses to mask API keys and invite tokens, providing additional security for user-related endpoints.
- Refactored routes to group security admin endpoints under a dedicated route with role-based access control.
- Added tests for import handler routes to verify authorization guards, ensuring only admin users can access import functionalities.

2026-02-25 05:41:35 +00:00

testdata

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

access_list_handler_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

access_list_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

access_list_handler.go

fix: improve error handling and session management in various handlers and middleware

2026-02-14 00:52:40 +00:00

additional_coverage_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

audit_log_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

audit_log_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

auth_handler_test.go

fix: enforce secure cookie settings and enhance URL validation in HTTP wrapper

2026-02-24 12:41:20 +00:00

auth_handler.go

fix: enforce secure cookie settings and enhance URL validation in HTTP wrapper

2026-02-24 12:41:20 +00:00

backend_coverage.txt

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

backup_handler_sanitize_test.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

backup_handler_test.go

chore: Enhance test coverage across various handlers and services

2026-02-16 20:32:16 +00:00

backup_handler.go

fix: Enhance logging sanitization across various handlers and services

2026-02-18 13:06:26 +00:00

benchmark_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

cerberus_logs_ws_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

cerberus_logs_ws.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

certificate_handler_coverage_test.go

fix: stabilize certificate test execution under CI concurrency

2026-02-19 00:44:44 +00:00

certificate_handler_security_test.go

fix: update database connection settings in notification rate limiting test for improved reliability

2026-02-17 08:46:39 +00:00

certificate_handler_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

certificate_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

conversion_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

coverage_helpers_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

coverage_quick_test.go

fix(tests): enhance database setup for unit tests and address CI failures

2026-02-16 21:20:34 +00:00

credential_handler_test.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

credential_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_archive_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_archive_validation_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_bouncer_test.go

fix: streamline environment variable setup in bouncer and LAPI key tests for consistency

2026-02-17 07:32:44 +00:00

crowdsec_cache_verification_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_coverage_boost_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_coverage_gap_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_coverage_target_test.go

fix: streamline environment variable setup in bouncer and LAPI key tests for consistency

2026-02-17 07:32:44 +00:00

crowdsec_decisions_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_exec_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_exec.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_handler_comprehensive_test.go

fix: update payload key in TestUpdateAcquisitionConfig to use 'content' instead of 'config'

2026-02-17 04:40:14 +00:00

crowdsec_handler_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_handler_test.go

fix: update Crowdsec handler tests to improve environment variable handling and response validation

2026-02-17 04:31:11 +00:00

crowdsec_handler.go

fix: Enhance logging sanitization across various handlers and services

2026-02-18 13:06:26 +00:00

crowdsec_lapi_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_presets_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_pull_apply_integration_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_state_sync_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_stop_lapi_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

crowdsec_wave3_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

crowdsec_wave5_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

crowdsec_wave6_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

crowdsec_wave7_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

db_health_handler_test.go

fix(tests): enhance database setup for unit tests and address CI failures

2026-02-16 21:20:34 +00:00

db_health_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

dns_detection_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

dns_detection_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

dns_provider_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

dns_provider_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

doc.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

docker_handler_test.go

choredocker): enhance local Docker socket access and error handling

2026-02-25 03:42:01 +00:00

docker_handler.go

fix: enhance DockerUnavailableError to include detailed error messages and improve handling in ListContainers

2026-02-24 22:24:38 +00:00

domain_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

domain_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

emergency_handler_test.go

fix: Add unit tests for emergency bypass and backup service validation

2026-02-18 17:33:56 +00:00

emergency_handler.go

fix: Enhance logging sanitization across various handlers and services

2026-02-18 13:06:26 +00:00

encryption_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

encryption_handler.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

feature_flags_blocker3_test.go

chore: Enhance backend test coverage and add new functional tests for Security page

2026-02-22 17:12:17 +00:00

feature_flags_coverage_v2_test.go

chore: Add tests for feature flags and notification providers

2026-02-21 20:55:01 +00:00

feature_flags_handler_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

feature_flags_handler_test.go

chore: Enhance backend test coverage and add new functional tests for Security page

2026-02-22 17:12:17 +00:00

feature_flags_handler.go

chore: enable Gotify and Custom Webhhok notifications and improve payload validation

2026-02-24 05:34:25 +00:00

handlers_blackbox_test.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

handlers_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

health_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

health_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

import_handler_coverage_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

import_handler_sanitize_test.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

import_handler_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

import_handler.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

json_import_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

json_import_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

logs_handler_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

logs_handler_test.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

logs_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

logs_ws_test.go

chore: add unit tests for LogsWebSocketHandler and streaming with filters

2026-02-16 06:57:12 +00:00

logs_ws.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

manual_challenge_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

manual_challenge_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

misc_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

notification_coverage_test.go

chore: enable Gotify and Custom Webhhok notifications and improve payload validation

2026-02-24 05:34:25 +00:00

notification_handler_test.go

fix: update setupNotificationTestDB to accept testing.T parameter for improved test isolation

2026-02-17 07:32:15 +00:00

notification_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

notification_provider_blocker3_test.go

chore: enable Gotify and Custom Webhhok notifications and improve payload validation

2026-02-24 05:34:25 +00:00

notification_provider_discord_only_test.go

chore: enable Gotify and Custom Webhhok notifications and improve payload validation

2026-02-24 05:34:25 +00:00

notification_provider_handler_test.go

fix: enhance notification provider validation and error handling in Test method

2026-02-24 19:56:57 +00:00

notification_provider_handler_validation_test.go

chore: Enhance test coverage across various handlers and services

2026-02-16 20:32:16 +00:00

notification_provider_handler.go

fix: enhance notification provider validation and error handling in Test method

2026-02-24 19:56:57 +00:00

notification_provider_patch_coverage_test.go

chore: enable Gotify and Custom Webhhok notifications and improve payload validation

2026-02-24 05:34:25 +00:00

notification_template_handler_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

notification_template_handler.go

fix: add system permissions handler for diagnostics and repair

2026-02-11 05:33:19 +00:00

npm_import_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

npm_import_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

PATCH_COVERAGE_ANALYSIS.md

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

perf_assert_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

permission_helpers_test.go

chore: add unit tests for auth handler, permission helpers, and mail service error handling

2026-02-16 06:48:49 +00:00

permission_helpers.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

plugin_handler_test.go

fix: improve error handling in ReloadPlugins test by simulating directory permission errors

2026-02-17 04:30:32 +00:00

plugin_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

pr_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

proxy_host_handler_security_headers_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

proxy_host_handler_test.go

chore: Enhance test coverage across various handlers and services

2026-02-16 20:32:16 +00:00

proxy_host_handler_update_test.go

fix: add parsing functions for nullable uint fields and forward port validation in proxy host updates

2026-02-15 20:11:03 +00:00

proxy_host_handler.go

fix: Enhance logging sanitization across various handlers and services

2026-02-18 13:06:26 +00:00

remote_server_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

remote_server_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

sanitize_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

sanitize.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_event_intake_test.go

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_geoip_endpoints_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_audit_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_authz_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_cache_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_handler_clean_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_coverage_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_fixed_test.go

fix: add latest config apply state retrieval; enhance status response with configuration details

2026-02-13 18:49:28 +00:00

security_handler_rules_decisions_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler_settings_test.go

fix: add latest config apply state retrieval; enhance status response with configuration details

2026-02-13 18:49:28 +00:00

security_handler_test_fixed.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_handler_waf_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_handler.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

security_headers_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_headers_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_notifications_blocker_test.go.archived

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications_compatibility_test.go

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications_compatibility_test.go.archived

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications_final_blockers_test.go

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications_patch_coverage_test.go

chore: Add tests for feature flags and notification providers

2026-02-21 20:55:01 +00:00

security_notifications_single_source_test.go

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications_test.go

chore: Enhance backend test coverage and add new functional tests for Security page

2026-02-22 17:12:17 +00:00

security_notifications_test.go.archived

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_notifications.go

feat: Enhance security notifications with new event types and provider integration

2026-02-20 13:03:40 +00:00

security_priority_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_ratelimit_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

security_toggles_test.go

fix: enhance authentication flow and session management in AuthHandler and middleware

2026-02-13 23:43:17 +00:00

settings_handler_helpers_test.go

chore: Enhance test coverage across various handlers and services

2026-02-16 20:32:16 +00:00

settings_handler_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

settings_handler.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

settings_wave3_test.go

chore: enhance test stability by managing SecurityService lifecycle and updating database migrations

2026-02-17 22:57:25 +00:00

settings_wave4_test.go

chore: enhance test stability by managing SecurityService lifecycle and updating database migrations

2026-02-17 22:57:25 +00:00

ssrf_test_helpers_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

system_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

system_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

system_permissions_handler_test.go

fix: add allowlist normalization and validation in permissions repair process

2026-02-18 06:31:19 +00:00

system_permissions_handler.go

fix: add allowlist normalization and validation in permissions repair process

2026-02-18 06:31:19 +00:00

system_permissions_wave6_test.go

chore: Add tests for backup service, crowdsec startup, log service, and security headers

2026-02-17 19:13:28 +00:00

testdb_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

testdb.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

update_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

update_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

uptime_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

uptime_handler.go

fix: Enhance logging sanitization across various handlers and services

2026-02-18 13:06:26 +00:00

uptime_monitor_initial_state_test.go

fix: add refresh token endpoint to authentication routes

2026-02-10 00:18:05 +00:00

user_handler_coverage_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

user_handler_test.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

user_handler.go

fix: Enhance security handler tests and implement role-based access control

2026-02-25 05:41:35 +00:00

user_integration_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

websocket_status_handler_test.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00

websocket_status_handler.go

fix: skip incomplete system log viewer tests

2026-02-09 21:55:55 +00:00