normogen/backend
goose 706df11f15
All checks were successful
Lint and Build / format (pull_request) Successful in 37s
Lint and Build / clippy (pull_request) Successful in 1m40s
Lint and Build / build (pull_request) Successful in 3m43s
Lint and Build / test (pull_request) Successful in 3m21s
fix(auth): wrong password returns Ok(false), not Err
verify_password() was mapping every password-hash failure — including a
plain wrong password (password_hash::Error::Password) — to Err, which
propagated to the login handler's Err arm and returned 500
'authentication error' instead of 401 'invalid credentials'.

All three callers (login, change_password, recover_password) already
match on Ok(true)/Ok(false)/Err and expect Ok(false) for a mismatch;
the function just wasn't honoring that contract. Map
Error::Password -> Ok(false) and propagate only genuine failures as Err.

This was a latent bug: CI's auth tests never ran before because the
Mongo service container couldn't schedule (port collision, fixed in
#8). Now that CI runs them for real, login_with_wrong_password_is_rejected
exposed it. Behavior improves on all three call sites — a wrong recovery
phrase now also correctly 401s instead of 500ing.
2026-07-19 02:29:09 -03:00
..
docker fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
docs docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
scripts chore: Clean up temporary docs and start Phase 2.4 2026-02-15 16:33:36 -03:00
src fix(auth): wrong password returns Ok(false), not Err 2026-07-19 02:29:09 -03:00
tests feat: per-profile DEKs + multi-profile (Phase A2, #3) 2026-07-18 23:45:01 -03:00
.dockerignore fix(docker): stop excluding Cargo.lock from the build context 2026-06-27 20:26:36 -03:00
.env.example fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
Cargo.lock fix(backend): refresh-token jti + code cleanup (#15,#28,#29,#30) 2026-06-27 20:57:24 -03:00
Cargo.toml fix(backend): refresh-token jti + code cleanup (#15,#28,#29,#30) 2026-06-27 20:57:24 -03:00
clippy.toml fix(clippy): resolve all clippy warnings 2026-03-12 09:03:38 -03:00
comprehensive-test-8001.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
comprehensive-test.sh fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
core-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
defaults.env fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
deploy-and-test.sh feat: implement health statistics tracking (Phase 2.7 Task 2) 2026-03-07 16:24:18 -03:00
diagnose-server.sh fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
docker-compose.dev.yml fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
docker-compose.yml fix: healthcheck uses HTTPS + -k for self-signed cert 2026-07-14 13:00:30 -03:00
Dockerfile fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
final-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
fixed-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
health-stats-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
phase27-final-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
phase27-fixed-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
phase27-test.sh docs(ai): reorganize documentation and update product docs 2026-03-09 11:04:44 -03:00
quick-test.sh docs(phase-2.5): Complete access control implementation 2026-02-15 21:15:17 -03:00
rustfmt.toml feat(ci): Add Forgejo CI/CD pipeline for linting and building 2026-02-15 19:57:03 -03:00
start-dev.sh Fix Docker networking and add graceful MongoDB error handling 2026-02-23 07:58:57 -03:00
stop-dev.sh Fix Docker networking and add graceful MongoDB error handling 2026-02-23 07:58:57 -03:00
test-med-v2.sh feat: implement health statistics tracking (Phase 2.7 Task 2) 2026-03-07 16:24:18 -03:00
test-medication-endpoints.sh feat: implement health statistics tracking (Phase 2.7 Task 2) 2026-03-07 16:24:18 -03:00
test-password-recovery.sh docs(phase-2.5): Complete access control implementation 2026-02-15 21:15:17 -03:00
test-phase-2-4-complete.sh feat(backend): Complete Phase 2.4 - User Management Enhancement 2026-02-15 20:48:39 -03:00
test-phase28.sh fix(backend): P2 config & Docker consistency 2026-06-27 19:54:32 -03:00
test-profile-management.sh feat(backend): Implement enhanced profile management 2026-02-15 19:33:43 -03:00
test-solaria-v2.sh feat: implement health statistics tracking (Phase 2.7 Task 2) 2026-03-07 16:24:18 -03:00