MechaCat02 0f9254b054 test(authz): bearer-authed admin cannot edit/cover NULL-uploader mangas (0.87.19) ...

0.87.10 followup from the rereview. The fix lacked a test for the
specific axis it changed (admin authority via cookie only). New test
mints a bearer for a promoted admin and asserts PATCH/PUT-cover/DELETE-
cover all 403 on NULL-uploader rows. Mutation-confirmed.

Also: `MultipartBuilder::finalize` now `pub` for bearer-multipart use;
`admin_csrf_guard` rustdoc updated to describe the post-0.87.10
cookie-precedence rule.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-06-23 20:36:50 +02:00

..

common

test(authz): bearer-authed admin cannot edit/cover NULL-uploader mangas (0.87.19)

2026-06-23 20:36:50 +02:00

fixtures/target

bugfix: chapter source key uses chapter id, not /pg-1/ (0.23.1)

2026-05-22 23:15:36 +02:00

admin_metrics_series.rs

feat(admin): time-series trend charts on the metrics tabs (0.87.0)

2026-06-19 11:48:56 +02:00

analysis_readiness.rs

feat(analysis): gate page leasing on a vision readiness probe

2026-06-14 14:57:48 +02:00

analysis_worker.rs

fix(analyze-dedup): migration pre-dedup, force-collision upgrade, gate test (0.87.11)

2026-06-23 07:22:20 +02:00

api_admin_analysis.rs

fix(analyze-dedup): migration pre-dedup, force-collision upgrade, gate test (0.87.11)

2026-06-23 07:22:20 +02:00

api_admin_audit.rs

feat(admin): audit-log viewer

2026-06-19 11:26:09 +02:00

api_admin_crawler.rs

fix(admin-security): close the bearer-cookie ride; require session for admin gate (0.87.10)

2026-06-22 22:28:16 +02:00

api_admin_health.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_mangas.rs

fix(admin): security-audit findings — paginate chapters, lock down unchecked helper (0.41.2)

2026-05-30 22:23:55 +02:00

api_admin_overview.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_resync.rs

feat: cover retry backfill + admin force-resync for manga & chapter (0.50.0)

2026-06-01 22:00:09 +02:00

api_admin_role.rs

fix(tests): update api_admin_role AppState to post-0.80 fields

2026-06-14 16:01:09 +02:00

api_admin_settings.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_storage.rs

feat(storage): admin storage-usage stats + per-manga/chapter sizes

2026-06-15 20:18:41 +02:00

api_admin_system.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_users.rs

feat(api): admin-initiated user creation via POST /admin/users (0.43.0)

2026-05-31 14:00:31 +02:00

api_auth.rs

test(auth): deflake login rate-limit burst test under CPU load (#10)

2026-06-16 18:04:53 +00:00

api_authors.rs

feat: author pages with /authors/:id route (0.16.0)

2026-05-17 14:39:11 +02:00

api_bookmarks.rs

feat: bookmark create enqueues SyncChapterContent jobs (0.29.0)

2026-05-25 20:59:14 +02:00

api_chapters.rs

feat(storage): admin storage-usage stats + per-manga/chapter sizes

2026-06-15 20:18:41 +02:00

api_collection_pages.rs

feat(search): tag-based page search surface + per-page tags & collections

2026-06-13 15:51:38 +02:00

api_collections.rs

feat: manga collections (0.17.0)

2026-05-17 17:43:06 +02:00

api_genres.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_history.rs

feat: read & upload history (0.19.0)

2026-05-17 18:19:52 +02:00

api_manga_warnings.rs

feat(mangas): content-warning filter on search + deduped banner on detail

2026-06-13 19:03:26 +02:00

api_mangas_cover.rs

bugfix: security & correctness bundle (0.34.1)

2026-05-28 20:24:51 +02:00

api_mangas_metadata.rs

test(authz): bearer-authed admin cannot edit/cover NULL-uploader mangas (0.87.19)

2026-06-23 20:36:50 +02:00

api_mangas.rs

feat(mangas): add tag-similarity "Similar" section on manga detail

2026-06-13 15:52:37 +02:00

api_page_analysis.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_search.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_tags.rs

feat(page-tags): normalize page_tags onto the shared tags table

2026-06-13 17:44:38 +02:00

api_preferences.rs

feat: continuous reader mode with persisted preference

2026-05-17 13:15:03 +02:00

api_private_mode.rs

feat: add PRIVATE_MODE site-wide auth gate (0.48.0)

2026-06-01 20:11:22 +02:00

api_tags.rs

bugfix: security & correctness bundle (0.34.1)

2026-05-28 20:24:51 +02:00

api_uploads.rs

feat(storage): admin storage-usage stats + per-manga/chapter sizes

2026-06-15 20:18:41 +02:00

crawl_metrics.rs

feat(admin): observability — job history, live now-analyzing, durations & metrics (0.84.0) (#6)

2026-06-16 12:21:13 +00:00

crawler_browser_smoke.rs

fix(tests): add user_agent field to crawler_browser_smoke LaunchOptions

2026-06-14 21:49:22 +02:00

crawler_daemon.rs

fix(analysis): emit Cancelled event + assert lock-release after cancel (0.87.13)

2026-06-23 19:00:38 +02:00

crawler_dead_jobs.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_jobs.rs

fix(analyze-dedup): migration pre-dedup, force-collision upgrade, gate test (0.87.11)

2026-06-23 07:22:20 +02:00

crawler_reconcile.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_recovery_flag.rs

feat(crawler): single-mode walker gated by recovery flag (0.36.0)

2026-05-29 23:49:28 +02:00

crawler_sync.rs

test(crawler): deflake sync serialization concurrency test (#7)

2026-06-16 13:38:15 +00:00

health.rs

feat: nest API under /api/v1, structured error envelope, paged lists

2026-05-16 21:41:20 +02:00

repo_chapter.rs

feat(admin): crawler observability dashboard + reliability hardening (0.55.0)

2026-06-06 18:49:56 +02:00