null/BillTracker
null
/
BillTracker
1
0
Fork 0
Code Issues 4 Pull Requests Packages Projects Releases 1 Wiki Activity
BillTracker/tests
History
null 3c82c30f3c fix(auth): handle requires_webauthn in POST /login — was a 500 self-lockout 
authService.login returns a requires_webauthn payload for webauthn-enabled
users, but the login route only handled requires_totp and fell through to
result.user.id (undefined) -> TypeError -> 500 on every attempt. Any user who
enabled WebAuthn via the API (reachable today) was permanently locked out.

- routes/auth.cts: return the two-step requires_webauthn payload (mirrors TOTP)
- services/authService.cts: stale-flag guard — webauthn_enabled with no usable
  credentials falls through to password login instead of hard-failing
- tests/authLoginWebauthnRoute.test.js: pins both paths + wrong-password 401

(QA-B1-01, lockout part)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 		2026-07-10 16:29:08 -05:00
..
amountSuggestionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
analyticsService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
authLoginWebauthnRoute.test.js fix(auth): handle requires_webauthn in POST /login — was a 500 self-lockout 2026-07-10 16:29:08 -05:00
authService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
backupAndCleanup.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
bankSyncService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billMerchantRuleService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billReorder.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billsDeletedRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billsService.test.js refactor(server): migrate billsService + notificationService to TypeScript (.cts) 2026-07-06 11:12:06 -05:00
calendarFeedService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
categoryGroups.test.js refactor(routes): categories → uniform Express-5 throw pattern (Pillar B template) 2026-07-06 14:46:32 -05:00
categoryReorder.test.js refactor(routes): categories → uniform Express-5 throw pattern (Pillar B template) 2026-07-06 14:46:32 -05:00
csvTransactionImportService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
encryptionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
eraseUserData.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
exportImportRoundTrip.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
exportRicher.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
kyselyPoc.test.js feat(db): Kysely typed-SQL POC — sync builder, proven parity (Pillar E) 2026-07-06 16:23:50 -05:00
logger.test.js feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
migrationModules.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
money.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
moneyProperties.test.js test(money): property-based proof of cent-exact invariants (fast-check, Pillar F) 2026-07-06 16:08:50 -05:00
notificationDelivery.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
notificationLeadTime.test.js refactor(server): migrate billsService + notificationService to TypeScript (.cts) 2026-07-06 11:12:06 -05:00
ofxImportService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentAccountingService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentValidation.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentsQuickRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentsRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
profileRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
reconciliation.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
safeToSpend.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
securityCoverage.test.js feat(security): CI secret-scan + dep-audit, SECURITY.md, auth-coverage test (Pillar C) 2026-07-06 14:40:17 -05:00
seedDemoData.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
snowballMath.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
snowballPlanRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
spendingService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
spendingSummary.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
statusService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
subscriptionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
summaryBankTracking.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
summarySkipOverride.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
totpService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
trackerService.test.js refactor(routes): analytics + tracker → throw pattern (batch 1) 2026-07-06 14:59:29 -05:00
transactionMatchService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
transactionMatchState.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
updateCheckOptOut.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00