Commit Graph

24 Commits

Author SHA1 Message Date
362098b954 test(chats): ensure saved chat delete clears history only
Some checks failed
CI / test (push) Failing after 1m28s
2026-03-08 20:27:33 +03:00
f57e254bcc test(messages): cover 7-day edit window enforcement
Some checks failed
CI / test (push) Has been cancelled
2026-03-08 20:26:21 +03:00
f746e31616 test(contacts): cover blocked relation for add-by-email
Some checks failed
CI / test (push) Failing after 1m18s
2026-03-08 20:23:50 +03:00
a900713a48 test(contacts): cover add-by-email success and not-found
Some checks failed
CI / test (push) Failing after 1m19s
2026-03-08 20:22:06 +03:00
1337a7c10e test(privacy): cover everyone group-invite policy
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:21:41 +03:00
4cd374e33e test(privacy): cover everyone private-message policy
Some checks failed
CI / test (push) Has been cancelled
2026-03-08 20:21:13 +03:00
aaae5b313e test(privacy): enforce nobody group-invite policy
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:20:47 +03:00
6fbb98cf2f test(invites): return 404 for invalid join token
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:19:53 +03:00
58e85d0a64 test(invites): cover join-by-token and invite-link permissions
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:19:16 +03:00
ee43d13ba4 test(roles): enforce owner-only member role management
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:17:30 +03:00
80bda6e537 test(channels): enforce delete-for-all permissions on messages
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:15:25 +03:00
9f03aafd18 test(privacy): enforce nobody private message policy
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:09:14 +03:00
1a3a54cfb9 test(moderation): enforce group profile edit permissions by role
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:04:55 +03:00
57b687a036 test(channels): validate admin global delete permissions
Some checks failed
CI / test (push) Failing after 51s
2026-03-08 20:03:15 +03:00
9bc695ca58 test(privacy): verify contacts-only avatar and presence visibility
Some checks are pending
CI / test (push) Has started running
2026-03-08 20:01:36 +03:00
6930e73b9f test(channels): enforce member read-only posting permissions
All checks were successful
CI / test (push) Successful in 50s
2026-03-08 19:58:10 +03:00
f03fcb2bb7 test(privacy): cover hidden avatar and last-seen in private chat list
Some checks are pending
CI / test (push) Has started running
2026-03-08 19:57:42 +03:00
1ef0cdf29d test(channel): forbid member delete with for_all
All checks were successful
CI / test (push) Successful in 42s
2026-03-08 19:45:37 +03:00
101f39771e fix(channel): member delete acts as leave; add coverage and docs
All checks were successful
CI / test (push) Successful in 42s
2026-03-08 19:44:42 +03:00
af1ce20640 tests(privacy): cover group-invite and avatar visibility policies
All checks were successful
CI / test (push) Successful in 31s
2026-03-08 19:05:43 +03:00
db700bcbcd moderation: add chat bans for groups/channels with web actions
All checks were successful
CI / test (push) Successful in 26s
2026-03-08 14:29:21 +03:00
76cc5e0f12 privacy/security: add PM privacy levels and improve session visibility
All checks were successful
CI / test (push) Successful in 24s
2026-03-08 14:26:19 +03:00
fc7a9cc3a6 test+web: fix test suite and remove redundant privacy checkbox
All checks were successful
CI / test (push) Successful in 25s
2026-03-08 12:16:21 +03:00
85631b566a Implement security hardening, notification pipeline, and CI test suite
All checks were successful
CI / test (push) Successful in 9m2s
Security hardening:

- Added IP/user rate limiting with Redis-backed counters and fail-open behavior.

- Added message anti-spam controls (per-chat rate + duplicate cooldown).

- Implemented refresh token rotation with JTI tracking and revoke support.

Notification pipeline:

- Added Celery app and async notification tasks for mention/offline delivery.

- Added Redis-based presence tracking and integrated it into realtime connect/disconnect.

- Added notification dispatch from message flow and notifications listing endpoint.

Quality gates and CI:

- Added pytest async integration tests for auth and chat/message lifecycle.

- Added pytest config, test fixtures, and GitHub Actions CI workflow.

- Fixed bcrypt/passlib compatibility by pinning bcrypt version.

- Documented worker and quality-gate commands in README.
2026-03-07 21:46:30 +03:00