jubnl 5500405f2f fix(security): stop cross-user offline data leak on shared devices (#1176) ...

Closes BLOCKER B4 — three reinforcing paths could serve one account's
cached data to the next user on a shared device:

- The Workbox 'api-data' cache keyed trip/user-scoped GETs by URL only
  (cookie-blind). Changed to NetworkOnly; offline reads come from the
  per-user IndexedDB cache via the repo layer instead.
- IndexedDB had no per-user scoping. The Dexie connection is now scoped
  per user (trek-offline-u<id>) behind a Proxy so the ~19 importers keep a
  stable binding; login opens the user DB, logout deletes it and returns
  to the anonymous DB.
- logout() was fire-and-forget and racy: background flush/syncAll could
  re-seed the DB after the wipe. It is now async and ordered — close an
  auth gate, unregister sync triggers, disconnect, clear caches, delete
  the user DB — and flush()/syncAll() bail when the gate is closed.

2026-06-15 07:58:20 +02:00

..

addonStore.test.ts

fix: miscellaneous bug fixes (#1139)

2026-06-09 16:02:37 +02:00

authStore.test.ts

fix(security): stop cross-user offline data leak on shared devices (#1176)

2026-06-15 07:58:20 +02:00

inAppNotificationStore.test.ts

test(client): expand frontend test suite to 69.1% coverage

2026-04-07 21:56:08 +02:00

permissionsStore.test.ts

test(front): add test suite frontend (WIP)

2026-04-07 12:31:09 +02:00

settingsStore.test.ts

fix(login): address review feedback on language dropdown PR

2026-04-15 03:04:25 +02:00

vacayStore.test.ts

test: expand frontend test suite to 82% coverage

2026-04-08 21:14:49 +02:00