cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): enforce audited account, network and resource boundaries

Browse Source 
Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
This commit is contained in:
cesnimda
2026-09-09 18:21:47 +02:00
parent 7d641edc7b
commit 0954876295
116 changed files with 10101 additions and 122 deletions
Download Patch File Download Diff File Expand all files Collapse all files
JobTrackerApi.Tests/RateLimitPartitionKeysTests.cs
+18
View File
@@ -1,4 +1,5 @@
using System.Net;
using System.Security.Claims;
using JobTrackerApi.Services;
using Microsoft.AspNetCore.Http;
using Xunit;
@@ -7,6 +8,23 @@ namespace JobTrackerApi.Tests;
public sealed class RateLimitPartitionKeysTests
{
[Theory]
[InlineData("account-data")]
[InlineData("email-send")]
public void Account_requires_authenticated_identity_and_keeps_anonymous_addresses_separate(string policy)
{
var anonymous = Context("203.0.113.10", "irrelevant");
anonymous.User = new ClaimsPrincipal(new ClaimsIdentity(new[] { new Claim(ClaimTypes.NameIdentifier, "unvalidated") }));
var otherIp = Context("203.0.113.11", "irrelevant");
Assert.Equal($"{policy}:ip:203.0.113.10", RateLimitPartitionKeys.Account(anonymous, policy));
Assert.NotEqual(RateLimitPartitionKeys.Account(anonymous, policy), RateLimitPartitionKeys.Account(otherIp, policy));
// Even an authenticated identifier shaped like an IP cannot collide with anonymous traffic.
var owner = Context("203.0.113.11", "irrelevant");
owner.User = new ClaimsPrincipal(new ClaimsIdentity(new[] { new Claim("sub", "203.0.113.10") }, "validated"));
Assert.Equal($"{policy}:user:203.0.113.10", RateLimitPartitionKeys.Account(owner, policy));
Assert.NotEqual(RateLimitPartitionKeys.Account(owner, policy), RateLimitPartitionKeys.Account(anonymous, policy));
}
[Fact]
public void Public_pdf_partition_isolated_by_client_and_slug()
{