kolaente 2f4e3ecb91 fix(api/v2): align avatar upload body limit with global overhead ...

MaxBodyBytes was set to exactly the configured max file size, but a
multipart request carries extra bytes (boundary, part headers) on top of
the file, so a file at the limit could be rejected by Huma before the
handler runs. Mirror the +2 MB overhead that Echo's global BodyLimit
middleware already allows so a max-sized avatar isn't rejected.

2026-06-02 11:55:25 +00:00

..

_test.go.tpl

…

admin_share_bypass_test.go

test(admin): add webtests for /admin/* endpoints and share bypass

2026-04-20 18:55:06 +00:00

admin_test.go

test(admin): add webtests for /admin/* endpoints and share bypass

2026-04-20 18:55:06 +00:00

api_token_method_matching_test.go

fix(security): enforce HTTP method and path in scoped API token matcher

2026-04-09 15:17:20 +00:00

api_tokens_test.go

test: verify caldav permission group appears in /routes

2026-03-30 12:09:53 +00:00

archived_test.go

fix(project): remove non-existent columns from UpdateProject column list

2026-04-03 16:59:05 +00:00

background_test.go

test: verify background removal preserves project title

2026-04-08 09:07:15 +00:00

caldav_test.go

fix(caldav): return 404 when trying to access a project that cannot exist with CalDAV (#2796)

2026-05-28 08:14:52 +02:00

error_responses_test.go

…

healthcheck_test.go

…

huma_admin_test.go

test(api/v2): assert admin project id via structured json

2026-06-02 07:38:08 +00:00

huma_avatar_test.go

feat(api/v2): serve user avatars

2026-06-02 08:17:00 +00:00

huma_avatar_upload_test.go

fix(api/v2): align avatar upload body limit with global overhead

2026-06-02 11:55:25 +00:00

huma_errors_test.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

huma_helpers_test.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

huma_label_test.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

huma_project_view_test.go

fix(api/v2): scope project view delete to its parent project

2026-06-01 13:04:34 +00:00

huma_task_duplicate_test.go

feat(api/v2): add task duplicate action (#2815)

2026-06-01 14:13:39 +02:00

integrations.go

test(api/v2): Label round-trip, ETag, PATCH, error shapes

2026-05-31 12:56:57 +00:00

kanban_test.go

…

label_task_test.go

…

link_share_avatar_test.go

…

link_sharing_auth_test.go

…

link_sharing_test.go

test(security): webtest that a deleted link share rejects its still-valid JWT

2026-04-09 15:38:07 +00:00

login_test.go

test(webtests): add end-to-end TOTP lockout test

2026-04-09 16:08:26 +00:00

main_test.go

…

oauth2_test.go

test: add tests for OAuth 2.0 authorization flow

2026-03-27 23:05:04 +00:00

project_test.go

fix(security): move reparent Admin gate into UpdateProject

2026-04-09 16:47:35 +00:00

register_test.go

…

sessions_test.go

…

task_attachment_idor_test.go

test: add IDOR test for task attachment ReadOne (GHSA-jfmm-mjcp-8wq2)

2026-03-23 16:34:07 +00:00

task_attachment_upload_test.go

…

task_by_index_test.go

test(api): cover positive project-identifier resolution

2026-05-19 08:53:25 +00:00

task_collection_test.go

feat(projects): always store identifiers as uppercase (#2775)

2026-05-19 10:35:43 +02:00

task_comment_test.go

fix: use require.Error instead of assert.Error for error assertions

2026-03-20 11:41:28 +00:00

task_test.go

fix(assignees): resolve 500 error when reading task assignees

2026-05-26 18:59:33 +00:00

token_test.go

…

user_change_password_test.go

…

user_confirm_email_test.go

…

user_export_download_test.go

…

user_export_status_test.go

…

user_password_request_token_test.go

…

user_password_reset_test.go

…

user_project_test.go

…

user_show_test.go

…

user_totp_test.go

fix: update TOTP fixtures and tests to avoid conflicts with existing enrollment tests

2026-03-20 12:22:27 +00:00

webhook_test.go

test: add failing test for webhook BasicAuth credential exposure

2026-03-23 16:35:47 +00:00