3 Commits

Include renames

Author	SHA1	Message	Date
Jeppe BandJeppe Bundgaard	3c13892366	Harden subuser permission payloads (#328) ... ## Summary - Normalize subuser grant permission payload keys before enum validation so mixed-case customer-facing writes are accepted and deduped consistently. - Add a focused subuser route static check for permission payload normalization. ## Verification - `php services/nginx/app/tests/subusers/SubusersRoutePermissionLinkTest.php && php services/nginx/app/tests/subusers/SubusersRoutePermissionsPayloadTest.php` - `php -l services/nginx/app/routes/subusersRoute.php && php -l services/nginx/app/tests/subusers/SubusersRoutePermissionsPayloadTest.php` --------- Co-authored-by: Jeppe Bundgaard <jb@truckwash.dk>	2026-07-28 17:06:29 +02:00
Jeppe Bundgaard	b291e959e0	Add WebAuthn integration, reCAPTCHA support, and new tests ... - Integrate WebAuthn library for passkey authentication workflows, including assertion verification and improved error handling. - Add support for reCAPTCHA token validation across multiple endpoints for enhanced security. - Extend OpenAPI schema to document new fields and restructured payloads. - Add unit tests for WebAuthn flows, permission initialization, and route validation to ensure robustness and accuracy.	2026-02-24 09:27:51 +01:00
Jeppe Bundgaard	497ef1496b	Add subuser permission evaluation system and extend subuser-related route handling ... - Introduce `hasPermission` method in `subusers_o` for permission checks tied to customer context. - Update `/subusers/me` route to return subuser grants with normalized permissions and metadata. - Add `get_subuser_customer_number_target` in `authentication` to resolve customer context from request headers. - Refactor route-level permission checks to handle subuser grants dynamically. - Introduce CLI test scripts for subuser grants and permission node mappings. - Add test coverage for subuser grants and permission nodes in new test classes.	2026-02-12 15:29:43 +01:00