robbond
ff84e9ea0f
fix(security): use server-configured PET notification recipient
2026-11-09 14:04:31 +00:00
robbond
f4f8075af3
fix(security): harden Contact Us PET notifications
2026-11-09 13:41:31 +00:00
robbond
3c0a9ef721
fix(security): harden Contact Us sender confirmations
2026-11-09 13:06:22 +00:00
robbond
b821dc2092
fix(security): append Contact Us CRM activity reminder
2026-11-09 12:07:08 +00:00
robbond
b15ac5e664
fix(security): harden Contact Us CRM task endpoint
2026-11-09 11:17:17 +00:00
robbond
fef9591b5d
fix(security): protect representation blob deletion against CSRF
2026-11-09 09:31:41 +00:00
robbond
4eba824ac2
fix(security): protect case blob deletion against CSRF
2026-11-09 07:56:59 +00:00
robbond
57e0c62940
fix(storage): constrain recursive blob deletion to resource folders
2026-11-07 11:12:08 +00:00
robbond
1377aebc89
fix: enforce representation blob ownership and secure SSR access
2026-11-06 17:05:40 +00:00
robbond
946d361a67
test: cover ITHC cross-user blob deletion protection
2026-11-06 13:02:49 +00:00
robbond
4b552e9cdd
refactor: extract server-side CRM personal account lookup
2026-11-06 11:22:42 +00:00
robbond
b9be188d27
security: enforce CRM contact ownership and account field allowlist
2026-11-06 10:55:47 +00:00
robbond
71de8a2d14
refactor: extract server-side CRM contact update
2026-11-06 09:58:02 +00:00
robbond
ddcef8f5ea
security: remove obsolete CRM login endpoint
2026-11-06 09:22:29 +00:00
robbond
f7479b72b9
security: remove obsolete CRM password update functionality
2026-11-06 09:14:54 +00:00
robbond
e1f8fb5c96
Revert "security: enforce authenticated CRM contact ownership"
...
This reverts commit e13700ab65
2026-11-06 06:42:16 +00:00
robbond
e13700ab65
security: enforce authenticated CRM contact ownership
2026-11-06 06:36:53 +00:00
robbond
a0a1331a97
fix(security): retire obsolete CRM representation deletion endpoint
2026-11-05 17:18:30 +00:00
robbond
faf3aa3675
fix(security): enforce ownership on private draft case creation
2026-11-05 16:58:35 +00:00
robbond
9b0cb9adc8
fix(security): retire legacy direct CRM case creation endpoint
2026-11-05 16:37:10 +00:00
robbond
93bf7e174f
fix(security): enforce ownership on private draft PDF generation
2026-11-05 14:11:45 +00:00
robbond
8b045ab781
fix(security): enforce ownership across appeal completion
2026-11-05 13:28:43 +00:00
robbond
fc960f907f
fix(security): enforce ownership on private draft blob deletion
2026-11-05 13:04:09 +00:00
robbond
056dace563
fix(security): enforce ownership on draft blob listing proxy
2026-11-05 12:59:55 +00:00
robbond
9d6d3b9f71
fix(security): enforce ownership on appeal and representation blob proxies
2026-11-05 12:53:24 +00:00
robbond
0a115a8808
security: preserve representation history in watched-case upsert
2026-11-05 12:48:45 +00:00
robbond
706083b6f0
test: update endpoint contract fixtures and add test filtering
2026-11-05 10:25:59 +00:00
robbond
431c45ba2b
security: enforce CRM watched-case deletion ownership
2026-11-05 10:24:52 +00:00
robbond
bb50b17277
fix(ithc): correct server-side session retrieval for file APIs
2026-11-03 09:25:02 +00:00
robbond
65616f6307
ITHC: enforce container ownership on uploads
2026-10-27 06:05:47 +00:00
robbond
5e98d6e8c2
ITHC: enforce administrative case deletion authorization
2026-10-27 05:40:50 +00:00
robbond
8b607d8134
ITHC: enforce representation completion ownership and admin access
2026-10-26 17:11:38 +00:00
robbond
034b59a981
ITHC: enforce representation blob proxy ownership and admin access
2026-10-26 16:17:52 +00:00
robbond
37aeb03509
ITHC: protect administrative representation unlock endpoint
2026-10-26 15:27:10 +00:00
robbond
0daeb783b9
Stage 3: enforce blob deletion ownership and add admin representation deletion
...
Also repairs two stale Phase 21 fixtures:
- Supplies a valid PDF to exercise the upload dependency-failure path.
- Injects getPersonalAccount into the representation-involvement VM fixture.
2026-10-26 14:39:22 +00:00
robbond
848728584e
Stage 2: integrate administrative login and protect dashboard
2026-10-26 14:31:07 +00:00
robbond
d11c4a868e
Add independent administrative authentication foundation
2026-10-26 12:51:42 +00:00
robbond
fcfb7cf75e
refactor(relay): extract shared relay policy presets across endpoints
2026-03-24 18:07:04 +00:00
robbond
318f913397
feat(relay): apply policy overrides for my-portal case and representation endpoints
2026-03-24 15:52:29 +00:00
robbond
0a5819803e
feat(relay): add portal endpoint relayPolicy overrides and contract checks
2026-03-24 15:44:09 +00:00
robbond
e0510f9e8f
feat(relay): apply endpoint-level relayPolicy overrides across account and search flows
2026-03-24 15:36:21 +00:00
robbond
bb190946ae
feat(relay): add policy overrides and idempotency-aware retry gating
2026-03-24 13:03:49 +00:00
robbond
1ba0cbe8a9
feat(relay): enrich request lifecycle telemetry for retries and outcomes
2026-03-24 12:54:07 +00:00
robbond
4e390491c0
refactor(api): tighten relay retry policy and config safety bounds
2026-03-24 11:54:42 +00:00
robbond
fad99c93bc
refactor(api): harden relay forwarding with timeout, retries and redacted logs
2026-03-24 11:43:40 +00:00
robbond
da29e789c0
refactor(api): migrate batch 12 remaining relay-get candidates
2026-03-24 10:27:27 +00:00
robbond
bf1ba9bc1e
refactor(api): migrate batch 11 advancedsearchpaged to relayGet
2026-03-24 10:15:25 +00:00
robbond
0f4b8005ba
refactor(api): migrate batch 10 endpoints to relayGet
2026-03-24 10:08:51 +00:00
robbond
e8d4e8563e
refactor(api): migrate batch 9 endpoints to relayGet
2026-03-24 09:59:59 +00:00
robbond
13be069b8b
refactor(api): migrate batch 8 endpoints to relayGet
2026-03-24 09:51:13 +00:00
robbond