69a4ea27cd
test(todos): add unit tests for POST /api/todos
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:48 +02:00
a6ae9f3ed1
test(tasks): add unit tests for PATCH /api/tasks/:id
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:46 +02:00
89f74f3dca
test(reorder): add unit tests for PATCH /api/stories/:id/tasks/reorder
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:45 +02:00
536456c1cd
test(story-log): add unit tests for POST /api/stories/:id/log
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:44 +02:00
dc7373e40d
test(sprint-tasks): add unit tests for GET /api/sprints/:id/tasks
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:38 +02:00
5903881580
test(next-story): add unit tests for GET /api/products/:id/next-story
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:37 +02:00
eafdef4d5a
test(products): add unit tests for GET /api/products
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:31:35 +02:00
ead91cef5f
test(security): extend security.test.ts to cover all 7 API endpoints
...
Adds 401, 403 demo-block, and cross-user isolation tests for:
GET /api/products/:id/next-story, GET /api/sprints/:id/tasks,
PATCH /api/stories/:id/tasks/reorder, POST /api/stories/:id/log,
POST /api/todos. Expands prisma mock to cover all required models.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:26:54 +02:00
46e795002f
test(scaffold): add skeleton test files for all 7 API endpoints
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:24:25 +02:00
e0efb65efb
Fix scoped access checks
2026-04-25 14:36:55 +02:00
d11b114fc1
feat: ST-601-ST-612 M6 polish, beveiliging en launch-ready
...
- ST-601/602: loading skeletons en error boundary
- ST-603: Sonner toasts op alle CRUD-operaties
- ST-604: DemoTooltip op uitgeschakelde knoppen
- ST-605: KeyboardSensor dnd-kit, Escape sluit modals
- ST-606: min-width banner < 1024px
- ST-607: WCAG AA aria-labels en skip link
- ST-608: rate limiting login (10/min) en registratie (5/uur)
- ST-609: security integratietests cross-user toegang (7 tests)
- ST-610: GitHub Actions CI/CD workflow
- ST-611: README met quickstart, deployment en API-docs
- ST-612: Lars-flow acceptatiechecklist
- fix: settings toont gebruikersnaam i.p.v. interne id
- fix: seed idempotent, testdata altijd gekoppeld aan demo-gebruiker
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 12:36:23 +02:00
