Latte fd5e4b71f3 fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18)

2026-10-14 17:14:13 +02:00

..

__init__.py

fix: cap and type-check the unauthenticated consent POST body (SEC-01)

2026-10-14 17:07:06 +02:00

helpers.py

fix: cap and type-check the unauthenticated consent POST body (SEC-01)

2026-10-14 17:07:06 +02:00

test_audit_fail_closed.py

fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18)

2026-10-14 17:14:13 +02:00

test_oauth_input_bounds.py

fix: cap and type-check the unauthenticated consent POST body (SEC-01)

2026-10-14 17:07:06 +02:00

test_secret_echo.py

fix: redact stored webhook authorization headers and other secret fields by key name (SEC-02)

2026-10-14 17:08:59 +02:00