Andrey Antukh 036a2c0d22 ♻️ Harden trusted alternate origins after review ...

Replace the OIDC-local build-public-uri helper with the canonical
cf/get-public-uri so every backend link shares one builder, and drop
the test that only covered the duplicate.

Assert the OIDC token-exchange redirect_uri under a trusted origin by
driving the callback with the HTTP client mocked instead of get-info;
the test fails if the exchange hardcodes the canonical base.

Document that removing an origin does not invalidate already-signed
OIDC states (up to four hours) and that MCP OAuth follows the stamped
origin the same way.

Bring MCP OAuth into scope: wrap its routes with wrap-trusted-origin,
stage the stamped origin in the Redis request record at authorize
time, and re-apply it in decision so issuer, resource, the approval
redirect and the code-exchange iss agree on one base. Unlisted
origins and requests without Origin keep the canonical base. Add a
tabulated trusted/untrusted end-to-end test over the real router.

AI-assisted-by: muse-spark-1.3-contributor

2026-11-12 10:12:48 +00:00

..

rpc/commands

🐛 Use multipart helper in jobs upload-chunk test

2026-10-17 21:53:29 +00:00

tasks

✨ Rework the progress of the import and export dialogs (#12192)

2026-11-02 12:12:39 +01:00

test_files

Merge remote-tracking branch 'origin/main' into staging

2026-09-29 23:07:26 +02:00

auth_ldap_test.clj

✨ Add a session origin model to auth events (#12856)

2026-11-09 10:11:54 +01:00

auth_login_lockout_test.clj

✨ Add account lockout after failed login attempts (#11402)

2026-09-23 12:31:50 +02:00

auth_oidc_test.clj

♻️ Harden trusted alternate origins after review

2026-11-12 10:12:48 +00:00

binfile_jobs_test.clj

✨ Rework the progress of the import and export dialogs (#12192)

2026-11-02 12:12:39 +01:00

binfile_svg_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-11-03 15:07:18 +01:00

binfile_test.clj

🐛 Skip circular library links on binfile import (#12062)

2026-11-11 13:02:57 +01:00

bounce_handling_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

climit_test.clj

✨ Stabilize fragmented file data across snapshots and GC (#12420)

2026-11-02 15:02:55 +01:00

config_test.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

db_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

db_transaction_test.clj

✨ Add unified jobs substrate replacing legacy one-shot task system (#11542)

2026-10-06 07:33:12 +02:00

delete_object_test.clj

✨ Enrich backend audit events with team and entity ids (#12233)

2026-10-15 13:01:18 +02:00

demo_test.clj

✨ Add unified jobs substrate replacing legacy one-shot task system (#11542)

2026-10-06 07:33:12 +02:00

email_blacklist_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

email_sending_test.clj

🐛 Send organization invitations to unregistered emails (#12937)

2026-11-10 14:12:27 +01:00

fdata_resolve_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

fdata_upsert_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

file_change_retention_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

file_change_schema_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

file_gc_scheduler_test.clj

✨ Harden file data offload job with lock, summary and metrics (#12403)

2026-10-22 15:31:16 +02:00

file_pointer_snapshot_test.clj

✨ Stabilize fragmented file data across snapshots and GC (#12420)

2026-11-02 15:02:55 +01:00

files_update_validation_timing_test.clj

⚡ Check the schema of only the pages a save touches

2026-11-05 23:59:32 +01:00

graph_binder_gate_test.clj

📎 Update copyright headers

2026-09-09 17:58:09 +02:00

graph_sync_parity_test.clj

⬆️ Update deps (#11960)

2026-09-29 09:07:34 +02:00

health_test.clj

🎉 Add graceful instance drain via /readyz

2026-10-13 14:33:32 +02:00

helpers_test.clj

🐛 Harden upload path handling and validation error bodies (#12067)

2026-10-17 16:01:04 +02:00

helpers.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

http_assets_test.clj

🎉 Add direct MCP feedback channel via dedicated tool (#12551)

2026-10-29 10:35:46 +01:00

http_client_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-10 20:29:44 +02:00

http_debug_test.clj

✨ Stabilize fragmented file data across snapshots and GC (#12420)

2026-11-02 15:02:55 +01:00

http_errors_test.clj

✨ Keep autosave and the workspace alive when saves fail

2026-11-05 23:59:32 +01:00

http_link_preview_test.clj

📎 Fix copyright owner on several files

2026-09-15 19:22:56 +02:00

http_management_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-14 14:50:32 +02:00

http_metrics_test.clj

✨ Make the CLIMIT queue visible with an accumulated gauge

2026-10-13 14:33:32 +02:00

http_middleware_security.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

http_middleware_test.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

http_websocket_test.clj

♻️ Scope organization notifications to specific WebSocket topics (#11460)

2026-10-01 13:16:12 +02:00

jobs_gc_test.clj

✨ Add unified jobs substrate replacing legacy one-shot task system (#11542)

2026-10-06 07:33:12 +02:00

jobs_metrics_test.clj

✨ Add skip-if-active option to jobs submit (#12266)

2026-10-11 18:48:02 +02:00

jobs_request_test.clj

✨ Add skip-if-active option to jobs submit (#12266)

2026-10-11 18:48:02 +02:00

jobs_storage_test.clj

✨ Run binfile import and export as durable jobs (#12056)

2026-10-07 11:52:48 +02:00

jobs_test.clj

🐛 Validate and decode a job result with its declared schema (#12350)

2026-10-15 19:18:04 +02:00

loggers_audit_consumer_task_test.clj

🐛 Forward attribute deletion events to admin console (#12932)

2026-11-10 13:47:13 +01:00

loggers_audit_test.clj

✨ Add a session origin model to auth events (#12856)

2026-11-09 10:11:54 +01:00

loggers_error_reporters_test.clj

✨ Audit-log docs, error-reporting flag and frontend initiator (#11997)

2026-10-02 11:08:13 +02:00

loggers_metrics_test.clj

✨ Count the application logs as a metric, by logger and level (#12313)

2026-10-15 19:50:06 +02:00

loggers_webhooks_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-10-16 12:48:49 +02:00

logical_deletion_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

mcp_oauth_clients_test.clj

✨ Add OAuth support for MCP server (#12480)

2026-10-28 18:40:04 +01:00

mcp_oauth_http_test.clj

♻️ Harden trusted alternate origins after review

2026-11-12 10:12:48 +00:00

mcp_oauth_state_test.clj

✨ Add OAuth support for MCP server (#12480)

2026-10-28 18:40:04 +01:00

media_remote_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-10 20:29:44 +02:00

media_sanitize_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

media_test.clj

🐛 Escape SVG values and sanitize every SVG upload (#12887)

2026-11-10 15:52:28 +01:00

media_validation_test.clj

🐛 Confine upload paths to temp dirs (#12772)

2026-11-03 12:07:52 +01:00

metrics_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-10-19 22:18:27 +02:00

migrations_legacy_file_data_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

migrations_partition_file_change_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

migrations_test.clj

✨ Add unified jobs substrate replacing legacy one-shot task system (#11542)

2026-10-06 07:33:12 +02:00

nitrate_ingest_audit_log_test.clj

✨ Add profile name and email to nitrate audit log (#12636)

2026-10-27 09:30:28 +01:00

nitrate_test.clj

🐛 Preserve admin console URL path segments (#12196)

2026-10-08 11:38:13 +02:00

objects_gc_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

offload_file_data_test.clj

✨ Rework the progress of the import and export dialogs (#12192)

2026-11-02 12:12:39 +01:00

passwords_test.clj

📎 Update copyright headers

2026-09-09 17:58:09 +02:00

redis_test.clj

🐛 Fix the key reported when a redis DEL times out

2026-10-20 15:33:37 +00:00

restore_storage_objects_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

rpc_access_tokens_test.clj

🎉 Add direct MCP feedback channel via dedicated tool (#12551)

2026-10-29 10:35:46 +01:00

rpc_audit_test.clj

♻️ Rename audit-log archivers to consumers and use base Nexus URI (#12459)

2026-10-19 23:25:44 +02:00

rpc_auth_override_test.clj

✨ Enable closed schemas for RPC methods (#11136)

2026-09-22 14:03:02 +02:00

rpc_auth_test.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

rpc_binfile_test.clj

✨ Rework the progress of the import and export dialogs (#12192)

2026-11-02 12:12:39 +01:00

rpc_climit_test.clj

♻️ Take the command limits before the root ones in the RPC limiter (#12686)

2026-10-28 18:44:36 +01:00

rpc_commands_error_reports_test.clj

Merge remote-tracking branch 'origin/main' into staging

2026-09-29 23:07:26 +02:00

rpc_commands_mcp_feedback_test.clj

🎉 Add direct MCP feedback channel via dedicated tool (#12551)

2026-10-29 10:35:46 +01:00

rpc_comment_test.clj

🐛 Require thread access when marking threads as read (#12894)

2026-11-10 15:54:11 +01:00

rpc_cond_middleware_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_demo_test.clj

✨ Make WebGL the default renderer for new accounts (#12880)

2026-11-06 14:44:24 +01:00

rpc_doc_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_feedback_test.clj

✨ Render email templates inside the mail job (#12448)

2026-11-05 17:46:48 +01:00

rpc_file_security_test.clj

✨ Restrict management RPC methods to their declared shared keys (#12736)

2026-11-03 13:49:36 +01:00

rpc_file_snapshot_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

rpc_file_test.clj

🐛 Skip circular library links on binfile import (#12062)

2026-11-11 13:02:57 +01:00

rpc_file_thumbnails_test.clj

Merge remote-tracking branch 'origin/staging-2.19.x' into staging

2026-11-10 18:09:07 +01:00

rpc_file_update_repair_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

rpc_file_update_test.clj

✨ Tell repairs, damaged data and other files apart in save notices

2026-11-05 23:59:32 +01:00

rpc_font_test.clj

🐛 Harden upload path handling and validation error bodies (#12067)

2026-10-17 16:01:04 +02:00

rpc_management_jobs_test.clj

✨ Restrict management RPC methods to their declared shared keys (#12736)

2026-11-03 13:49:36 +01:00

rpc_management_nitrate_test.clj

Merge remote-tracking branch 'origin/staging-2.19.x' into staging

2026-11-10 18:09:07 +01:00

rpc_management_shared_keys_test.clj

✨ Restrict management RPC methods to their declared shared keys (#12736)

2026-11-03 13:49:36 +01:00

rpc_management_test.clj

✨ Restrict management RPC methods to their declared shared keys (#12736)

2026-11-03 13:49:36 +01:00

rpc_media_test.clj

🐛 Escape SVG values and sanitize every SVG upload (#12887)

2026-11-10 15:52:28 +01:00

rpc_nitrate_test.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

rpc_organization_owner_permissions_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_plugins_test.clj

✨ Ask users to allow global plugins on install

2026-10-07 14:58:32 +02:00

rpc_profile_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-11-09 10:42:28 +01:00

rpc_project_test.clj

✨ Enrich backend audit events with team and entity ids (#12233)

2026-10-15 13:01:18 +02:00

rpc_quotes_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

rpc_rlimit_test.clj

🐛 Restore rate-limit headers and add Retry-After on 429 (#11895)

2026-09-24 12:19:29 +02:00

rpc_team_test.clj

✨ Honor trusted alternate origins for backend links and OIDC

2026-11-12 09:24:59 +00:00

rpc_test.clj

✨ Restrict management RPC methods to their declared shared keys (#12736)

2026-11-03 13:49:36 +01:00

rpc_viewer_test.clj

🐛 Trim linked-library data in view-only bundle for share links (#11627)

2026-09-22 14:43:04 +02:00

rpc_webhooks_test.clj

✨ Enrich backend audit events with team and entity ids (#12233)

2026-10-15 13:01:18 +02:00

scripts_decode_file_data_test.clj

✨ Add table partitioning for file-change (#12417)

2026-11-10 23:27:17 +01:00

shell_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

srepl_main_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-10-28 10:35:31 +01:00

storage_gc_deleted_test.clj

⚡ Chunk storage-gc-deleted reads with a keyset cursor

2026-10-16 15:57:32 +02:00

storage_metadata_test.clj

✨ Add unified jobs substrate replacing legacy one-shot task system (#11542)

2026-10-06 07:33:12 +02:00

storage_metrics_test.clj

✨ Add Prometheus metrics for storage operations (#11700)

2026-09-23 15:25:21 +02:00

storage_s3_metrics_test.clj

✨ Add Prometheus metrics for storage operations (#11700)

2026-09-23 15:25:21 +02:00

storage_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-10-19 22:18:27 +02:00

storage_tmp_test.clj

🐛 Reserve S3 download path without creating the file

2026-10-05 17:16:47 +02:00

tasks_telemetry_test.clj

✨ Preserve subscription audit properties (#12850)

2026-11-05 13:21:23 +01:00

util_blob_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

util_events_test.clj

✨ Run binfile import and export as durable jobs (#12056)

2026-10-07 11:52:48 +02:00

util_objects_map_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

util_pointer_map_test.clj

✨ Stabilize fragmented file data across snapshots and GC (#12420)

2026-11-02 15:02:55 +01:00

util_ssrf_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

worker_cron_test.clj

♻️ Use skip-if-active for cron no-overlap in backend worker (#12412)

2026-10-22 15:29:37 +02:00

worker_dispatcher_test.clj

✨ Add skip-if-active option to jobs submit (#12266)

2026-10-11 18:48:02 +02:00

worker_runner_test.clj

✨ Run binfile import and export as durable jobs (#12056)

2026-10-07 11:52:48 +02:00

worker_test.clj

✨ Run binfile import and export as durable jobs (#12056)

2026-10-07 11:52:48 +02:00