Amin Ghadersohi aabf6c2a6e fix(mcp): address CodeQL security warnings and add ApiKey RBAC regression test ...

- Remove JWT-extracted username from ValueError message in auth.py to
  avoid CodeQL py/clear-text-logging-sensitive-data; log at DEBUG instead
- Log count of invalid FAB_API_KEY_PREFIXES entries rather than values to
  avoid the same CodeQL rule in composite_token_verifier.py
- Add regression test asserting "ApiKey" in ADMIN_ONLY_VIEW_MENUS so a
  future rename cannot silently re-open the FAB ApiKeyApi to non-Admin roles

2026-05-14 23:37:33 +00:00

..

__init__.py

…

api_test.py

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

audit_log_test.py

feat: role/user CRUD events and login/logout tracking in the action log (#39121)

2026-04-09 15:55:25 +01:00

exclude_users_filter_test.py

fix: apply EXCLUDE_USERS_FROM_LISTS to /api/v1/security/users/ (#36742)

2025-12-23 15:18:34 -08:00

guest_rls_test.py

fix(embedded): prevent double RLS application in virtual datasets (#37395)

2026-03-12 14:12:59 +01:00

manager_test.py

fix: add parent_slice_id for multilayer charts to embed (#38243)

2026-03-12 21:21:43 +03:00

test_granular_export_permissions.py

fix(mcp): address CodeQL security warnings and add ApiKey RBAC regression test

2026-05-14 23:37:33 +00:00