admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Browse Source 
Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-12 15:13:59 +02:00
parent dcd89364a4
commit fd28d70bff
183 changed files with 2671 additions and 411 deletions
Download Patch File Download Diff File Expand all files Collapse all files
controller/internal/web/r403_surface_test.go
+7 -7
View File
@@ -32,8 +32,8 @@ func TestR403_SkippedUnitLegIsNotRenderedAsFresh(t *testing.T) {
t.Error("the preserved-package notice is not on the page — a preserved copy renders as a fresh one")
}
// The PACKAGE's date is shown, not only the run's.
if !strings.Contains(html, fmtRFC3339Local(pkgDate)) {
t.Errorf("the package's own date %q is not on the page", fmtRFC3339Local(pkgDate))
if !strings.Contains(html, fmtRFC3339Local("hu", pkgDate)) {
t.Errorf("the package's own date %q is not on the page", fmtRFC3339Local("hu", pkgDate))
}
// NEGATIVE CONTROL: an ordinary row must NOT carry the notice, or D1 would pass on a page that
@@ -49,7 +49,7 @@ func TestR403_SkippedUnitLegIsNotRenderedAsFresh(t *testing.T) {
}
func staleNoticeFor(t *testing.T, pkgDate string) string {
return noteServer(t).note(tier2UnitStaleNoticeFmtKey, fmtRFC3339Local(pkgDate))
return noteServer(t).note(tier2UnitStaleNoticeFmtKey, fmtRFC3339Local("hu", pkgDate))
}
// D2 — TestR403_UnitRestoreOfferNamesTheOlderPackageDate.
@@ -64,7 +64,7 @@ func TestR403_UnitRestoreOfferNamesTheOlderPackageDate(t *testing.T) {
if !strings.Contains(staleConfirm, noteHU(t, tier2UnitStaleClauseKey)) {
t.Error("the confirm does not say the package is older than the newest run")
}
if !strings.Contains(staleConfirm, fmtRFC3339Local(pkgDate)) {
if !strings.Contains(staleConfirm, fmtRFC3339Local("hu", pkgDate)) {
t.Error("the confirm does not name the package's date")
}
// Everything the ordinary confirm promised is still promised.
@@ -114,8 +114,8 @@ func TestR403_OutcomeNamesThePackageDateNotTheRunDate(t *testing.T) {
UnitLegPreserved: true,
}
msg := noteServer(t).tier2UnitSourceMsg(cov)
pkg := fmtRFC3339Local("2026-08-31T09:43:41Z")
run := fmtRFC3339Local("2026-08-31T12:23:51Z")
pkg := fmtRFC3339Local("hu", "2026-08-31T09:43:41Z")
run := fmtRFC3339Local("hu", "2026-08-31T12:23:51Z")
if !strings.Contains(msg, pkg) {
t.Errorf("the outcome does not name the package's date %q: %q", pkg, msg)
}
@@ -131,7 +131,7 @@ func TestR403_OutcomeNamesThePackageDateNotTheRunDate(t *testing.T) {
// NEGATIVE CONTROL: with no preserved leg, the package date IS the fresh one and both agree on it.
fresh := backup.Tier2Coverage{CopyLastSuccess: "2026-08-31T12:23:51Z", UnitPackageDate: "2026-08-31T12:23:00Z"}
if !strings.Contains(noteServer(t).tier2UnitSourceMsg(fresh), fmtRFC3339Local("2026-08-31T12:23:00Z")) {
if !strings.Contains(noteServer(t).tier2UnitSourceMsg(fresh), fmtRFC3339Local("hu", "2026-08-31T12:23:00Z")) {
t.Error("the ordinary outcome stopped naming its own package date")
}
}