feat(api): RequireAuth+RequireProjectAccess middleware, IDOR-scope check/apply по projectID

2026-07-03 20:47:40 +07:00
parent 35ffe73ae3
commit 4533b0ca25
16 changed files with 498 additions and 143 deletions
@@ -214,7 +214,7 @@ func TestSetDomainTemplate_ClosesImportCheckLoop(t *testing.T) {
 	dom := doms[0]

 	// Before binding, the domain is not checkable.
-	if _, err := s.LoadDomain(ctx, dom.ID); err == nil {
+	if _, err := s.LoadDomain(ctx, defaultProject, dom.ID); err == nil {
 		t.Fatal("expected LoadDomain to fail before a template is bound")
 	}

@@ -234,7 +234,7 @@ func TestSetDomainTemplate_ClosesImportCheckLoop(t *testing.T) {
 		t.Fatalf("expected domain.TemplateID=%s, got %+v", tpl.ID, updated.TemplateID)
 	}

-	ref, err := s.LoadDomain(ctx, dom.ID)
+	ref, err := s.LoadDomain(ctx, defaultProject, dom.ID)
 	if err != nil {
 		t.Fatalf("expected LoadDomain to succeed after binding template, got error: %v", err)
 	}