Christophe Vila ad906a10f7 api: add end-to-end cross-user isolation tests ...

HTTP-level counterpart to the store-layer isolation tests: proves the full
middleware+handler chain rejects/hides another user's activities, workout
kinds, and review queue even when given that user's real row ids, and that
an unprovisioned session is blocked from every data route.

2026-07-25 18:33:44 +02:00

..

.idea

Dedup Garmin data storage, configurable chart colors, taxonomy fixes, sync/progression fixes

2026-07-20 06:33:47 +02:00

cmd

api: build per-user garmin.Client/sync.Service via lazy caching

2026-07-25 18:10:09 +02:00

internal

api: add end-to-end cross-user isolation tests

2026-07-25 18:33:44 +02:00

go.mod

auth: add Keycloak OIDC verifier, role check, and test mock

2026-07-24 21:26:15 +02:00

go.sum

auth: add Keycloak OIDC verifier, role check, and test mock

2026-07-24 21:26:15 +02:00

start.sh

geniusrund: construct the OIDC verifier and require its config at startup

2026-07-24 21:41:32 +02:00