lundberg/porchlight
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
porchlight/tests/test_store
History
Exact
Johan Lundberg f03d509eb4
fix(security): enforce globally-unique WebAuthn credential_id 
The webauthn_credentials primary key is (user_id, credential_id), which does
not stop the same credential_id from existing under two users. Usernameless
authentication looks up the credential by id alone, so a duplicate could
resolve to the wrong account. Add a unique index on credential_id (migration
003); duplicate registration now raises DuplicateError.

Refs: porchlight-as2

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 13:51:09 +02:00
..
__init__.py chore: create package structure with src layout 2026-02-12 14:39:07 +01:00
conftest.py fix: resolve all ruff lint errors and type checker warnings 2026-03-31 15:48:46 +02:00
test_db.py refactor: extract open_db() context manager from lifespan 2026-02-16 15:41:15 +01:00
test_exceptions.py update all imports in test files: fastapi_oidc_op → porchlight 2026-02-16 15:34:53 +01:00
test_migrations.py fix(security): enforce globally-unique WebAuthn credential_id 2026-06-05 13:51:09 +02:00
test_protocols.py feat: add Consent model, migration, and repository 2026-02-18 15:01:35 +01:00
test_sqlite_consent_repo.py fix: resolve all ruff lint errors and type checker warnings 2026-03-31 15:48:46 +02:00
test_sqlite_credential_repo.py fix(security): enforce globally-unique WebAuthn credential_id 2026-06-05 13:51:09 +02:00
test_sqlite_magic_link_repo.py fix(security): consume magic-link tokens atomically 2026-06-04 10:46:38 +02:00
test_sqlite_user_repo.py fix(security): prevent removing the last active admin 2026-06-05 13:31:39 +02:00