8 Commits

Include renames

Author	SHA1	Message	Date
Hein	c7b4530689	fix(race): make make test-race pass across ./pkg/... ... Add a test-race target and run test-unit over ./pkg/... Production races: - logger: guard Logger/errorTracker with an RWMutex - security: copy UserContext for the async session-activity goroutine and track it with a WaitGroup Test fixes: - eventbroker, websocketspec: use atomics for state shared with workers - security: wait for async activity updates before touching sqlmock - mqttspec: build full HookContext, set SubscriptionID, pin the in-memory SQLite to one connection Update the cross-cutting audit (X1) with status and findings.	2026-09-30 13:07:47 +02:00
warkanum	dab4940ace	fix(security): DatabaseAuthenticator.RefreshToken surfaces rotated refresh token and expiry ... RefreshToken() hardcoded LoginResponse{Token: userCtx.SessionID, ExpiresIn: 24h} and silently discarded anything else resolvespec_refresh_token returned. An implementation that issues its own independent, rotating refresh token (not just reusing the session/access token as its own refresh token) has nowhere else to put the new refresh token and real access-token expiry than UserContext.Claims, since UserContext has no dedicated fields for either. Now reads claims.refresh_token/claims.expires_in when present and surfaces them into LoginResponse.RefreshToken/ExpiresIn. Implementations that don't set these claims keep today's behavior unchanged (empty RefreshToken, 24h ExpiresIn default) — purely additive, no breaking change.	2026-08-27 21:51:16 +02:00
Hein	e5984f5205	feat(security): add cookie support for login and logout methods ... * Implement LoginWithCookie and LogoutWithCookie in stubAuthenticator, mockAuth, mockSecurityProvider, and MockAuthenticator * Update tests to use cookie-based authentication	2026-05-21 09:51:30 +02:00
Hein	16a960d973	feat(db): add reconnect logic for database adapters ... * Implement reconnect functionality in GormAdapter and other database adapters. * Introduce a DBFactory to handle reconnections. * Update health check logic to skip reconnects for transient failures. * Add tests for reconnect behavior in DatabaseAuthenticator.	2026-04-10 11:18:39 +02:00
warkanum	0b8d11361c	feat(auth): ✨ add user registration functionality ... * Implemented resolvespec_register stored procedure for user registration. * Added RegisterRequest struct for registration data. * Created Register method in DatabaseAuthenticator. * Updated tests for successful registration and error handling for duplicate usernames and emails.	2026-01-31 21:50:32 +02:00
Hein	a95c28a0bf	Multi Token warning and handling	2025-12-10 08:44:37 +02:00
Hein	0f05202438	Database Authenticator with cache	2025-12-09 11:32:44 +02:00
Hein	b2115038f2	Fixed providers	2025-12-09 11:18:11 +02:00