chore(tests): подтвердить маскирование заполненных секретов интеграций

This commit is contained in:
Denozordec committed 2026-10-13 16:32:58 +07:00
1 parent 3c30c5c7cb
commit 7a58f472b3
8 files changed
+149 -12

No files matched your search

@@ -0,0 +1,75 @@
{
"date": "2026-10-13",
"block": "12.5.203",
"database": "mm_accept_166_1791883862303",
"scope": "Actual compiled buildApp/auth/GET handlers and own restricted PostgreSQL with nonempty synthetic credentials; isolated signed test JWT, not real Portal login",
"cases": [
{
"role": "reader",
"path": "/api/backups/storage",
"status": 200,
"syntheticSecretExposed": false,
"configuredFlag": true
},
{
"role": "reader",
"path": "/api/evobgp/settings",
"status": 403,
"syntheticSecretExposed": false,
"configuredFlag": false
},
{
"role": "reader",
"path": "/api/alerts",
"status": 200,
"syntheticSecretExposed": false,
"configuredFlag": true
},
{
"role": "admin",
"path": "/api/backups/storage",
"status": 200,
"syntheticSecretExposed": false,
"configuredFlag": true
},
{
"role": "admin",
"path": "/api/evobgp/settings",
"status": 200,
"syntheticSecretExposed": false,
"configuredFlag": true
},
{
"role": "admin",
"path": "/api/alerts",
"status": 200,
"syntheticSecretExposed": false,
"configuredFlag": true
},
{
"role": "unauthenticated",
"path": "/api/backups/storage",
"status": 401
},
{
"role": "unauthenticated",
"path": "/api/evobgp/settings",
"status": 401
},
{
"role": "unauthenticated",
"path": "/api/alerts",
"status": 401
}
],
"passed": true,
"externalRequests": 0,
"storedSyntheticSecretsUnchanged": true,
"cleanup": {
"ownedDatabaseRoleContainerRemoved": true
},
"bounds": [
"No S3/EvoBGP connection or Telegram send tested",
"Known DTO fields only; binary backups/exports and arbitrary embedded error credentials not audited"
]
}