kite/backend/api at 34b05937826ec0cfbf5dcb309ff84bd56d58e63d - kite

curo/kite

Files

T

curo1305 d84e38acca test(05-06): promote 11 integration test stubs to real passing tests

- test_connect_google_drive: OAuth initiate redirects to Google (Redis mocked)
- test_oauth_callback_valid_state: valid state + mocked Flow.fetch_token → 302 (CLOUD-01)
- test_oauth_callback_invalid_state: invalid state → error redirect (CLOUD-01)
- test_webdav_connect_validates: localhost URL → 422 (D-17 SSRF)
- test_credentials_enc_not_exposed: credentials_enc absent from response (CLOUD-02, SEC-08)
- test_cloud_upload_no_presigned: cloud upload returns no upload_url (CLOUD-03)
- test_connection_status_display: ACTIVE status in list response (CLOUD-04)
- test_invalid_grant_sets_requires_reauth: 503 on invalid_grant (CLOUD-05)
- test_disconnect_deletes_credentials: DELETE 204 + DB row gone (CLOUD-06)
- test_admin_cannot_see_credentials: admin gets 403 (SEC-08 IDOR)
- test_cross_user_idor: wrong-owner delete → 404 (SEC-08 IDOR)

Also fix CloudConnectionOut.id field validator to accept UUID objects from ORM
(Rule 1: Bug - UUID id caused pydantic validation error on list_connections)

All 20 cloud tests PASSED; full suite: 282 passed, 1 pre-existing failure

2026-05-29 07:51:02 +02:00

__init__.py

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

admin.py

test(05-06): promote 11 integration test stubs to real passing tests

2026-05-29 07:51:02 +02:00

audit.py

feat(phase-4-06): admin audit log viewer + CSV export (ADMIN-06)

2026-05-25 18:48:02 +02:00

auth.py

feat(phase-4): Task 1 — audit log backfill in auth.py and documents.py (D-13)