Files
jobtrackingapp/docs/security/ENDPOINT_AUTH_MATRIX.csv
T

1.4 KiB

1methodroutesourcedeclared_authcontrol_observedsensitive_asset_or_effectcandidate_test_suiteaudit_execution
2GET/api/attachments/{jobId:int}AttachmentsController.cs:87local schemejob query before attachment listing; filter audit pendingattachment metadataAttachmentsControllerTestsNOT RUN
3GET/api/attachments/download/{id:int}AttachmentsController.cs:103local schemeowned helper and managed path checksattachment bytesAttachmentsControllerTestsNOT RUN
4PATCH/api/attachments/{id:int}AttachmentsController.cs:125local schemeowned helper; mutation review pendingmetadata and AI-use flagAttachmentsControllerTestsNOT RUN
5GET/api/billing/statusBillingController.cs:42local schememethod declares local authenticationentitlement statusBillingControllerTestsNOT RUN
6POST/api/billing/checkoutBillingController.cs:58local schememethod declares local authentication; provider mocked onlycheckout sessionBillingControllerTestsNOT RUN
7POST/api/billing/portalBillingController.cs:104local schememethod declares local authentication; provider mocked onlybilling portalBillingControllerTestsNOT RUN
8POST/api/billing/webhookBillingController.cs:132AllowAnonymoussignature verification and size limit; full binding audit pendingsubscription entitlementBillingControllerTestsNOT RUN
9PUT/api/users/{id}/rolesUsersController.cs:142Admin role at classprivilege transition review pendingaccount rolesUsersControllerTestsNOT RUN