ObsiGate

5 Commits

Include renames

Author	SHA1	Message	Date
bruno	162a5b4acc	fix(security): consolidation & securite phase 1 (#84 , BUG-021 a BUG-034) CI / lint (push) Successful in 1m20s Details CI / security (push) Successful in 47s Details CI / test (push) Successful in 2m21s Details CI / build (push) Successful in 43s Details CI / e2e (push) Successful in 10m48s Details - sanitizer XSS serveur (markdown + page de partage) [BUG-021/022] - rate-limit/lockout MFA [BUG-023] - isolation vaults par segments [BUG-024] - caps regex ReDoS [BUG-025] - SSRF webhooks + secrets externalises [BUG-026] - rotation/revocation des jetons [BUG-027] - politique de mot de passe + invalidation sessions [BUG-028] - verrous users.json [BUG-029] - IP reelle dans les audits [BUG-030] - rate-limit par compte [BUG-031] - symlinks hors vault ignores [BUG-032] - recherche simple via inverted index [BUG-033] - token en memoire + cookie HttpOnly, CSP durcie [BUG-034] Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.	2026-09-13 10:51:42 -04:00
bruno	46be24f6a3	feat(admin): frontend dashboard complet pour #71 CI / lint (push) Successful in 36s Details CI / security (push) Successful in 23s Details CI / test (push) Successful in 46s Details CI / build (push) Successful in 22s Details CI / e2e (push) Successful in 5m43s Details Desktop Build / build-windows (push) Canceled after 0s Details Desktop Build / build-linux (push) Canceled after 0s Details Page admin standalone + widgets temps réel + CRUD users via AdminPanel existant. - frontend/admin.html : page admin (header + 4 sections : stats temps réel, audit logs, backups, gestion utilisateurs + footer) - frontend/js/admin.js : module ES avec init(), connectSSE(), loadStatsOnce(), loadAuditLogs(), loadBackupStats(), renderStatsWidget(), renderAuditTable(), renderBackups() + helpers (formatBytes, formatUptime, severityColor) - frontend/locales/{fr,en}.json : 36 clés admin.* identiques (diff vérifié) - frontend/js/auth.js : adminRow.onclick redirige vers /admin.html (au lieu de AdminPanel.show() qui reste fonctionnel) - tests/frontend/unit.test.mjs : 3 nouveaux tests (admin.js existe + exports + parse) - tests/test_auth_api.py : 2 nouveaux tests smoke (PATCH + DELETE /api/auth/admin/users) Vérifié : - pytest : 494 passed, 5 skipped (492 baseline + 2 nouveaux) - frontend unit : 7 passed (4 baseline + 3 admin) - validate-imports : 30 modules validated (29 + admin.js) - pane-manager JSDOM : 9/9 passed - ruff check backend/ : All checks passed	2026-09-07 11:14:46 -04:00
bruno	a0cae4a6a4	fix: close TestClient properly in auth_client fixture to prevent gzip cleanup errors CI / lint (push) Successful in 14s Details CI / security (push) Successful in 11s Details CI / test (push) Failing after 23s Details CI / build (push) Has been skipped Details	2026-06-05 07:52:29 -04:00
bruno	3b53de1b33	fix: resolve 57 ruff lint errors (unused imports, unused variables, import placement) CI / lint (push) Failing after 14s Details CI / test (push) Has been skipped Details CI / build (push) Has been skipped Details CI / security (push) Successful in 11s Details	2026-06-04 23:32:47 -04:00
bruno	3151721aad	test: coverage 70% — +109 tests (api integ, auth api, watcher mocked) CI / lint (push) Failing after 5s Details CI / test (push) Has been skipped Details CI / build (push) Has been skipped Details CI / security (push) Successful in 9s Details	2026-06-02 10:21:13 -04:00