DL6ER 039547e5ca Merge branch 'development' into fix/top-domains-recycled-heap

2026-07-12 19:45:39 +02:00

..

json

!!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS.

2023-05-30 21:22:45 +02:00

libs

Port API tests from BATS to pytest and fix ResponseVerifyer

2026-03-25 08:51:04 +01:00

checkAPI.py

Block Teleporter import for CLI sessions

2026-04-03 13:05:13 +03:00

conftest.py

tests: resolve iCloud Private Relay zones from local pdns

2026-06-24 06:25:39 +00:00

openapi-enforcer.js

Also allow authentication by sending SID via HEADER

2021-02-03 09:08:23 +01:00

pytest.ini

test: add pytest API test files and final BATS validation suite

2026-03-25 11:28:03 +01:00

test_api.py

Merge branch 'development' into fix/top-domains-recycled-heap

2026-07-12 19:45:39 +02:00

test_m_mutations.py

fix: accept punycode domains that libidn2 rejects under IDNA2008

2026-04-06 11:08:42 +02:00

test_openapi.py

fix: correct auth_method in test error messages, fix stale comment

2026-03-29 21:14:22 +02:00

test_s_auth_stress.py

Address review comments

2026-05-06 19:10:21 +02:00

test_z_auth_security.py

Add security regression tests for auth and query hardening

2026-07-04 20:25:14 +02:00

test_z_auth.py

test: add PUT/DELETE, batch delete, query filter, and auth tests

2026-03-30 21:26:16 +02:00

test-rate-limit.py

Add rate-limiting on password login attempts

2023-10-07 19:59:32 +02:00