jubnl 535c06bb3f feat(mcp): granular OAuth scopes and per-client rate limiting ...

- Split `media:read` into `geo:read` and `weather:read` scopes
- Add dedicated `atlas:read/write` scopes (previously under `places`)
- Add dedicated `todos:read/write` scopes (previously under `collab`)
- Rate limiting now keyed by userId+clientId instead of userId alone
- Bind MCP sessions to the OAuth client that created them
- Log MCP tool calls to audit log with clientId
- Invalidate all MCP sessions on addon state change
- Reduce session sweep interval from 10min to 1min
- Update all translations with new scope labels

2026-04-11 02:06:32 +02:00

..

mcp

feat(mcp): granular OAuth scopes and per-client rate limiting

2026-04-11 02:06:32 +02:00

middleware

test: expand test suite to 87.3% backend coverage

2026-04-06 20:08:30 +02:00

services

security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)

2026-04-10 02:03:27 +02:00

utils

test: expand test suite to 87.3% backend coverage

2026-04-06 20:08:30 +02:00

scheduler.test.ts

Add comprehensive backend test suite (#339)

2026-04-03 13:17:53 +02:00