fix: 2026-06-04 audit pass — README, USB pack, multi-area fixes
WS ticket dashboard auth, builder universal signing/size limits/fusion obfuscation/dropper bundles, Path Tracer WireGuard topology, SessionGate degraded mode and download timeouts, server bootstrap (data dir, cloudflared dedupe, config port precedence), agent mesh/miner/spread fixes. README refreshed; usb bundle repacked; PROBLEMS.md audit log updated.
This commit is contained in:
@@ -98,6 +98,18 @@ func TestCheckDashboardWSTokenBcryptUser(t *testing.T) {
|
||||
}
|
||||
}
|
||||
|
||||
func TestCheckDashboardWSTicketOneTime(t *testing.T) {
|
||||
ticket := issueWSTicket("dash")
|
||||
req := httptest.NewRequest(http.MethodGet, "/ws/dashboard?ticket="+ticket, nil)
|
||||
if !checkDashboardWSToken(req) {
|
||||
t.Fatal("valid ticket should pass")
|
||||
}
|
||||
req = httptest.NewRequest(http.MethodGet, "/ws/dashboard?ticket="+ticket, nil)
|
||||
if checkDashboardWSToken(req) {
|
||||
t.Fatal("ticket should be one-time use")
|
||||
}
|
||||
}
|
||||
|
||||
func TestHandleDashboardWSUnauthorized(t *testing.T) {
|
||||
database, err := db.New(t.TempDir())
|
||||
if err != nil {
|
||||
|
||||
Reference in New Issue
Block a user