Felipe Cardoso d75a8de91b Add validation to prevent privilege escalation via is_superuser field and enhance related tests ...

- Added explicit Pydantic validation to reject modifications to `is_superuser` in `UserUpdate` schema.
- Updated backend logic in `users.py` to support defense-in-depth against privilege escalation.
- Introduced comprehensive tests for `/users` and `/users/me` endpoints to ensure `is_superuser` validation works correctly.
- Enhanced error handling and validation messages for better clarity and robustness.

2025-11-01 16:15:03 +01:00

..

api

Add validation to prevent privilege escalation via is_superuser field and enhance related tests

2025-11-01 16:15:03 +01:00

core

Refactor authentication services to async password handling; optimize bulk operations and queries

2025-11-01 03:53:22 +01:00

crud

Add extensive tests for handling CRUD and API error scenarios

2025-11-01 13:12:36 +01:00

models

Convert password reset and auth dependencies tests to async

2025-10-31 22:31:01 +01:00

schemas

Update tests for security and validation improvements

2025-11-01 04:00:51 +01:00

services

Remove CRUD test modules for unused and deprecated features

2025-11-01 05:48:20 +01:00

utils

Add comprehensive tests for session cleanup and async CRUD operations; improve error handling and validation across schemas and API routes

2025-11-01 05:22:45 +01:00

conftest.py

Remove CRUD test modules for unused and deprecated features

2025-11-01 05:48:20 +01:00

test_init_db.py

Add extensive CRUD tests for session and user management; enhance cleanup logic

2025-11-01 12:18:29 +01:00