Pouzor e14a9e87aa fix: stop exposing JWT in WebSocket URL query param ...

Token was visible in server logs, browser history, and proxy access logs.
Backend now accepts the connection first, then validates a JSON auth
message {"token": "<jwt>"} sent by the client on open before adding
the socket to the active connections pool.

2026-03-18 00:49:03 +01:00

..

__init__.py

fix: all lint errors, test + lint pre-commit passing

2026-03-06 23:58:10 +01:00

conftest.py

refactor: replace config.yml with .env for all configuration

2026-03-09 11:26:49 +01:00

test_auth.py

test: add backend tests for MCP service key auth in deps.py

2026-03-13 16:42:48 +01:00

test_canvas.py

refactor: replace config.yml with .env for all configuration

2026-03-09 11:26:49 +01:00

test_edges.py

refactor: replace config.yml with .env for all configuration

2026-03-09 11:26:49 +01:00

test_fingerprint.py

feat: add Camera node type + flag RTSP/camera ports during scan

2026-03-08 11:55:26 +01:00

test_nodes.py

feat(mcp): expose parent_id in update_node tool

2026-03-13 21:29:27 +01:00

test_scan.py

refactor: replace config.yml with .env for all configuration

2026-03-09 11:26:49 +01:00

test_scheduler.py

refactor: replace config.yml with .env for all configuration

2026-03-09 11:26:49 +01:00

test_status_checker.py

test: add coverage for none check method, re-scan update, icon registry

2026-03-08 01:12:32 +01:00

test_status.py

fix: stop exposing JWT in WebSocket URL query param

2026-03-18 00:49:03 +01:00