kolaenteandkolaente 1ca5367f27 feat(api/v2): add notifications list/mark-read + mark-all on /api/v2 ...

Ports the v1 DatabaseNotifications routes to the Huma /api/v2 API:
- GET /notifications lists the caller's own notifications (paginated)
- PUT /notifications/{notificationid} marks one (un-)read
- POST /notifications is a custom action marking all as read; the
  link-share guard, session and commit live in the handler since there
  is no CRUDable Do* for a bulk mark.

Adds fixture rows and a webtest matrix mirroring the v1 model behaviour
(own-only visibility, mark-(un)read, link-share refusal on every route).

2026-06-07 10:05:24 +00:00

..

_test.go.tpl

…

admin_share_bypass_test.go

test(admin): add webtests for /admin/* endpoints and share bypass

2026-04-20 18:55:06 +00:00

admin_test.go

test(admin): add webtests for /admin/* endpoints and share bypass

2026-04-20 18:55:06 +00:00

api_token_method_matching_test.go

fix(security): enforce HTTP method and path in scoped API token matcher

2026-04-09 15:17:20 +00:00

api_tokens_test.go

test: verify caldav permission group appears in /routes

2026-03-30 12:09:53 +00:00

archived_test.go

fix(project): remove non-existent columns from UpdateProject column list

2026-04-03 16:59:05 +00:00

background_test.go

test: verify background removal preserves project title

2026-04-08 09:07:15 +00:00

caldav_test.go

fix(caldav): return 404 when trying to access a project that cannot exist with CalDAV (#2796)

2026-05-28 08:14:52 +02:00

error_responses_test.go

…

healthcheck_test.go

…

huma_admin_test.go

test(api/v2): port full v1 admin projects coverage

2026-06-03 19:48:08 +00:00

huma_api_token_test.go

feat(api/v2): add API token list/create/delete on /api/v2

2026-06-05 08:49:23 +00:00

huma_archived_test.go

test(api/v2): isolate project tests per-handler, not via shared harness

2026-06-05 07:40:07 +00:00

huma_avatar_test.go

test(api/v2): port full v1 avatar coverage to TestAvatar

2026-06-03 19:58:27 +00:00

huma_avatar_upload_test.go

fix(api/v2): reject non-decodable images (e.g. SVG) on avatar upload with 400

2026-06-02 11:55:25 +00:00

huma_bot_user_test.go

feat(api/v2): add bot user CRUD on /api/v2

2026-06-05 08:51:39 +00:00

huma_errors_test.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

huma_helpers_test.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

huma_label_task_test.go

feat(api/v2): add task labels (create/list/delete) on /api/v2

2026-06-05 08:33:47 +00:00

huma_label_test.go

feat(api/v2): report max_permission on label and project-view reads

2026-06-04 21:16:51 +00:00

huma_link_sharing_test.go

fix(link-sharing): resolve share read permission via project id so by-id reads work

2026-06-05 09:17:25 +00:00

huma_notification_test.go

feat(api/v2): add notifications list/mark-read + mark-all on /api/v2

2026-06-07 10:05:24 +00:00

huma_project_test.go

test(api/v2): cover central validation (422, invalid_fields, full-body webhook updates)

2026-06-06 21:09:56 +00:00

huma_project_view_test.go

feat(api/v2): report max_permission on label and project-view reads

2026-06-04 21:16:51 +00:00

huma_session_test.go

feat(api/v2): add session list/delete on /api/v2

2026-06-05 08:21:48 +00:00

huma_subscription_test.go

docs: trim wordy comments to load-bearing whys

2026-06-07 09:57:51 +00:00

huma_task_assignee_test.go

feat(api/v2): add task assignees (create/list/delete) on /api/v2

2026-06-06 19:06:12 +00:00

huma_task_comment_test.go

test(api/v2): assert task comment max_permission and per-caller ETag

2026-06-05 07:43:38 +00:00

huma_task_duplicate_test.go

test(api/v2): port full v1 TaskDuplicate coverage

2026-06-03 20:29:15 +00:00

huma_team_test.go

test(api/v2): assert both ETags non-empty in team permission test

2026-06-05 08:06:54 +00:00

huma_webhook_test.go

test(api/v2): cover central validation (422, invalid_fields, full-body webhook updates)

2026-06-06 21:09:56 +00:00

integrations.go

test(api/v2): isolate project tests per-handler, not via shared harness

2026-06-05 07:40:07 +00:00

kanban_test.go

…

label_task_test.go

…

link_share_avatar_test.go

…

link_sharing_auth_test.go

…

link_sharing_test.go

test(security): webtest that a deleted link share rejects its still-valid JWT

2026-04-09 15:38:07 +00:00

login_test.go

test(webtests): add end-to-end TOTP lockout test

2026-04-09 16:08:26 +00:00

main_test.go

…

oauth2_test.go

test: add tests for OAuth 2.0 authorization flow

2026-03-27 23:05:04 +00:00

project_test.go

fix(security): move reparent Admin gate into UpdateProject

2026-04-09 16:47:35 +00:00

register_test.go

…

sessions_test.go

…

task_attachment_idor_test.go

…

task_attachment_upload_test.go

…

task_by_index_test.go

test(api): cover positive project-identifier resolution

2026-05-19 08:53:25 +00:00

task_collection_test.go

feat(projects): always store identifiers as uppercase (#2775)

2026-05-19 10:35:43 +02:00

task_comment_test.go

…

task_test.go

fix(assignees): resolve 500 error when reading task assignees

2026-05-26 18:59:33 +00:00

token_test.go

…

user_change_password_test.go

…

user_confirm_email_test.go

…

user_export_download_test.go

…

user_export_status_test.go

…

user_password_request_token_test.go

…

user_password_reset_test.go

…

user_project_test.go

…

user_show_test.go

…

user_totp_test.go

…

webhook_test.go

test: add failing test for webhook BasicAuth credential exposure

2026-03-23 16:35:47 +00:00