video-accessibility

Oliver/video-accessibility

Fork 0

Commit graph

Author	SHA1	Message	Date
Vadym Samoilenko	5fd370c093	test: fix all unit tests — 168 passing, 0 failures - conftest.py: set required env vars before app import to prevent Settings() crash - gcs.py: lazy bucket init checks _bucket instead of _client; add @bucket.setter - vtt.py: fix float precision in _format_timestamp; include empty-text cues in parser - security.py: guard verify_password against empty hash (passlib UnknownHashError) - tts.py: _parse_timestamp raises ValueError("Invalid timestamp format: …") - emailer.py: HTML-escape job_title in _render_completion_template (XSS fix) - test_emailer.py: rewrite for Mailgun-based service (replaced SendGrid) - test_gcs.py: fix UploadFile constructor, MIME type, remove executor.submit mock - test_gemini.py: patch module-level client instead of non-existent genai.upload_file; translate_vtt tests use numbered-list mock responses matching new implementation - test_tts.py: fix aiohttp async CM mock pattern; fix error message match - test_models.py: update JobCreate to use source_is_english instead of language - test_security.py: set jwt_access_ttl_min in token test - test_cross_tenant_isolation.py: add patch to imports Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-30 14:02:04 +01:00
Vadym Samoilenko	4623b89aeb	feat(mt-16): JWT org_ids claim + transient user.org_ids in deps - create_access_token gains optional org_ids: list[str] param; encodes {exp, sub, org_ids, v:2} — org_ids is a prefilter hint only, never used as authorization source of truth (Redis cache is authoritative) - Login, MS login, refresh endpoints: fetch memberships and include org_ids in issued access tokens via _get_user_org_ids() helper - routes_invitations.py accept flow: same org_ids population on token - get_current_user: reads org_ids from payload, attaches as transient user.__dict__["org_ids"] — available to OrgScopedQuery for prefilter - Force logout: rotate JWT_SECRET env var at deployment time (no code change needed; all existing tokens immediately invalidated) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-29 20:46:39 +01:00
michael	af2562096a	initial commit	2025-08-24 16:28:33 -05:00

Author

SHA1

Message

Date

Vadym Samoilenko

5fd370c093

test: fix all unit tests — 168 passing, 0 failures

- conftest.py: set required env vars before app import to prevent Settings() crash
- gcs.py: lazy bucket init checks _bucket instead of _client; add @bucket.setter
- vtt.py: fix float precision in _format_timestamp; include empty-text cues in parser
- security.py: guard verify_password against empty hash (passlib UnknownHashError)
- tts.py: _parse_timestamp raises ValueError("Invalid timestamp format: …")
- emailer.py: HTML-escape job_title in _render_completion_template (XSS fix)
- test_emailer.py: rewrite for Mailgun-based service (replaced SendGrid)
- test_gcs.py: fix UploadFile constructor, MIME type, remove executor.submit mock
- test_gemini.py: patch module-level client instead of non-existent genai.upload_file;
  translate_vtt tests use numbered-list mock responses matching new implementation
- test_tts.py: fix aiohttp async CM mock pattern; fix error message match
- test_models.py: update JobCreate to use source_is_english instead of language
- test_security.py: set jwt_access_ttl_min in token test
- test_cross_tenant_isolation.py: add patch to imports

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-30 14:02:04 +01:00

Vadym Samoilenko

4623b89aeb

feat(mt-16): JWT org_ids claim + transient user.org_ids in deps

- create_access_token gains optional org_ids: list[str] param; encodes
  {exp, sub, org_ids, v:2} — org_ids is a prefilter hint only, never
  used as authorization source of truth (Redis cache is authoritative)
- Login, MS login, refresh endpoints: fetch memberships and include
  org_ids in issued access tokens via _get_user_org_ids() helper
- routes_invitations.py accept flow: same org_ids population on token
- get_current_user: reads org_ids from payload, attaches as transient
  user.__dict__["org_ids"] — available to OrgScopedQuery for prefilter
- Force logout: rotate JWT_SECRET env var at deployment time (no code
  change needed; all existing tokens immediately invalidated)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-29 20:46:39 +01:00

michael

af2562096a

initial commit

2025-08-24 16:28:33 -05:00

3 commits