diff options
| author | Adam Soltys <[email protected]> | 2026-08-07 23:06:50 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-08-07 23:29:27 -0700 |
| commit | 8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb (patch) | |
| tree | c3bba9a916eae755eea371fbdf62ec1d6d04fb68 /lib/api.js.map | |
| parent | 28e93331a16c962572a3ce55aee3f9b22a1cc74e (diff) | |
| download | coinos-server-8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb.tar.gz coinos-server-8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb.zip | |
test: regtest regression suite for the security-disclosure fixes
16 tests covering S1 (jwt.verify vs forged tokens), S2 (bcrypt cost 12 +
legacy detection), S3 (adminpass fails closed on omitted/empty password),
S5 (session cookie flags), S6 (atomic SET NX dedup), S7 (/upload auth),
fnd-003/004 (memo truncation), fnd-006 (deleteSelf sub-account guard),
and S8/fnd-007 (spend/cash mutex serialization). Black-box HTTP + redis
against the live regtest stack; run with `bun run test:regtest`.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
Diffstat (limited to 'lib/api.js.map')
0 files changed, 0 insertions, 0 deletions