[6] Kritische Tests: Auth-Sicherheit #14

Merged

hobbypunk merged 6 commits from enhancement/6_critical_tests into main 2026-09-26 17:58:41 +00:00

Conversation 1 Commits 6 Files changed 64 +2216 -38

hobbypunk commented 2026-09-26 17:01:27 +00:00

Owner

Copy link

closed #6

closed #6

hobbypunk added 1 commit 2026-09-26 17:01:27 +00:00

refactor(controllers): improve authorization, session handling, and error handling across multiple controllers ... 000042f48a

feat(test): add comprehensive test coverage for authentication controllers

feat(test): add WebAuthn passkey and TOTP authentication integration tests

---------

Co-Authored-By: opencode (Mistral GLM) <opencode-agent[bot]@hoppe-dev.eu>

hobbypunk added this to the Testabdeckung von mindestens 90% milestone 2026-09-26 17:01:30 +00:00

hobbypunk added the

enhancement

label 2026-09-26 17:01:33 +00:00

forgejo-actions commented 2026-09-26 17:03:43 +00:00

Copy link

📊 Coverage

Metrik	Abdeckung
Zeilen	94.03% (2518/2678)
Branches	71.79% (560/780)
Methoden	92.71% (394/425)

Patch-Coverage: 100.0% (16/16 geänderte Zeilen)

Geänderte Dateien (schwach zuerst)

Datei	Patch-Coverage	Fehlende Zeilen
app/controllers/concerns/proxy_authentication.rb	100.0% (4/4)
app/controllers/sessions/otps_controller.rb	100.0% (3/3)
app/policies/user_policy.rb	100.0% (3/3)
app/controllers/email_verifications_controller.rb	100.0% (1/1)
app/controllers/oauth_sessions_controller.rb	100.0% (1/1)
app/controllers/registrations_controller.rb	100.0% (1/1)
app/controllers/sessions/passkeys_controller.rb	100.0% (1/1)
app/models/concerns/translatable/hint.rb	100.0% (1/1)
app/models/social_accounts.rb	100.0% (1/1)

Schwächste Dateien im Projekt

Datei	Abdeckung
app/components/form/checkbox.rb	28.57%
app/components/form/text_area.rb	33.33%
app/controllers/settings_controller.rb	33.33%
app/views/admin/activities/index.rb	42.59%
app/models/concerns/has_uuid_v7.rb	54.55%
app/components/form/select.rb	72.41%
app/controllers/sessions_controller.rb	77.42%
app/components/pagination.rb	77.78%
app/components/concerns/inferrable.rb	78.13%
app/components/dropdown.rb	79.31%

🔍 Report im Browser ansehen · 📄 Run-Artifact „coverage-report“

<!-- coverage-report --> ## 📊 Coverage | Metrik | Abdeckung | |---|---| | Zeilen | 94.03% (2518/2678) | | Branches | 71.79% (560/780) | | Methoden | 92.71% (394/425) | **Patch-Coverage**: 100.0% (16/16 geänderte Zeilen) **Geänderte Dateien (schwach zuerst)** | Datei | Patch-Coverage | Fehlende Zeilen | |---|---|---| | app/controllers/concerns/proxy_authentication.rb | 100.0% (4/4) | | | app/controllers/sessions/otps_controller.rb | 100.0% (3/3) | | | app/policies/user_policy.rb | 100.0% (3/3) | | | app/controllers/email_verifications_controller.rb | 100.0% (1/1) | | | app/controllers/oauth_sessions_controller.rb | 100.0% (1/1) | | | app/controllers/registrations_controller.rb | 100.0% (1/1) | | | app/controllers/sessions/passkeys_controller.rb | 100.0% (1/1) | | | app/models/concerns/translatable/hint.rb | 100.0% (1/1) | | | app/models/social_accounts.rb | 100.0% (1/1) | | **Schwächste Dateien im Projekt** | Datei | Abdeckung | |---|---| | app/components/form/checkbox.rb | 28.57% | | app/components/form/text_area.rb | 33.33% | | app/controllers/settings_controller.rb | 33.33% | | app/views/admin/activities/index.rb | 42.59% | | app/models/concerns/has_uuid_v7.rb | 54.55% | | app/components/form/select.rb | 72.41% | | app/controllers/sessions_controller.rb | 77.42% | | app/components/pagination.rb | 77.78% | | app/components/concerns/inferrable.rb | 78.13% | | app/components/dropdown.rb | 79.31% | [🔍 Report im Browser ansehen](https://pages.hoppe-dev.eu/hobbypunk/rails-base_app/pr-14/coverage) · [📄 Run-Artifact „coverage-report“](https://code.hoppe-dev.eu/hobbypunk/rails-base_app/actions/runs/1469/artifacts/coverage-report)

hobbypunk added 1 commit 2026-09-26 17:14:56 +00:00

refactor(models): fix delegation and social account URL generation while adding datetime flag and user agent tests ... 8fad7e9cb8

test: add comprehensive test coverage for model concerns and session behavior

test: add unit tests for social accounts, array validator, password complexity validator and URL validator

---------

Co-Authored-By: opencode (Mistral GLM) <opencode-agent[bot]@hoppe-dev.eu>

hobbypunk added 1 commit 2026-09-26 17:31:16 +00:00

test: fix parallel test race conditions in i18n and geocoder mocking 093b39b46c

hobbypunk added 1 commit 2026-09-26 17:33:07 +00:00

test(mailers): add tests for OnboardingMailer and PasswordsMailer to verify email content and routing ... 457a43ab6d

---------

Co-Authored-By: opencode (Mistral GLM) <opencode-agent[bot]@hoppe-dev.eu>

hobbypunk added 1 commit 2026-09-26 17:44:13 +00:00

feat(components): add comprehensive test coverage for UI components including badges, cards, forms, links, stats, tabs, and tooltips ... 80cf84c41b

test: add comprehensive test coverage for admin, authentication, and user features

---------

Co-Authored-By: opencode (Mistral GLM) <opencode-agent[bot]@hoppe-dev.eu>

hobbypunk added 1 commit 2026-09-26 17:56:40 +00:00

refactor(policies): improve user policy checks and add new policy tests for admin and security features ... 817ffcca82

test(policies): add comprehensive policy tests for session, settings, system and user policies

---------

Co-Authored-By: opencode (Mistral GLM) <opencode-agent[bot]@hoppe-dev.eu>

hobbypunk merged commit 1bcad48d24 into main 2026-09-26 17:58:41 +00:00

hobbypunk deleted branch enhancement/6_critical_tests 2026-09-26 17:58:41 +00:00

hobbypunk referenced this pull request from a commit 2026-09-26 17:58:43 +00:00

[6] Kritische Tests: Auth-Sicherheit (#14)

hobbypunk referenced this pull request 2026-09-27 12:18:08 +00:00

Testabdeckung: >95% Zeilen/Methoden & >75% Branches #7

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

auto-merge

Merged den PR automatisch, sobald alle Checks grün sind (per Triage-Workflow geplant)

  

bug

Something is not working

  

chore

Routine tasks, maintenance

  

dependency

Dependency updates

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

wontfix

This won't be fixed

No labels

auto-merge

bug

chore

dependency

duplicate

enhancement

wontfix

Milestone

Clear milestone

No items

No milestone

Testabdeckung von mindestens 90%

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

hobbypunk/rails-base_app!14

No description provided.