mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-06 15:22:12 +03:00
Two pre-existing failures (release CI never ran): 1. Auth: the /api/compliance/audit-log route now requires management auth (requireManagementAuth). The test issued bare requests; in CI INITIAL_PASSWORD makes auth required, so it got 401. Now attaches a signed dashboard-session cookie via the shared managementSession helper (like sibling management-route tests). 2. Taxonomy: the test seeded stale action names (provider.added, combo.created) and treated provider.validation.ssrf_blocked as non-high. Aligned the seed to real HIGH_LEVEL_ACTIONS (provider.credentials.created, quota.pool.created) so the level=high filter assertion validates the actual filter.