diegosouzapw b6d2f0f82b fix(api): reject revoked, deactivated, banned or expired keys on DELETE /v1/batches/delete-completed ...

The fail-closed gate added in #13262 authorized a presented key by row
EXISTENCE (getApiKeyMetadata); a revoked/deactivated/banned/expired key
still has a row and ran the sweep (CWE-613). The route now also requires
validateApiKey() — the one lifecycle gate — before choosing a scope, and
neither an unresolved nor an invalid key falls through to the session
branch. Both 401 bodies now go through buildErrorBody() (Hard Rule #12).

Found by the omni-code-sec battery on #12969 (SEC-B, SEC-E, SEC-F);
4 negative route tests added (revoked, deactivated, banned, expired —
the last one alongside a session cookie).

Refs #12969

2026-09-10 19:06:29 -03:00

..

_helpers

…

_setup

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

benchmarks

…

boundary

…

e2e

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

fixtures

fix(sse): preserve 1min.ai partial output before stream errors (#12466)

2026-09-03 21:06:28 -03:00

golden-set

…

helpers

…

homolog

…

integration

fix(chat): continue after a server-owned tool on Chat Completions (#12867)

2026-09-07 09:15:00 -03:00

live

…

llm-security

…

load

…

manual

…

security

…

snapshots

feat(models): live account catalog for Claude, Codex, Copilot, AGY (#12866)

2026-09-07 09:02:59 -03:00

translator

…

unit

fix(api): reject revoked, deactivated, banned or expired keys on DELETE /v1/batches/delete-completed

2026-09-10 19:06:29 -03:00

_cp_mock_hook.mts

…

_cp_mock_module.mts

…

_run_dns_guard_test.sh

…

e2e-tool-calls.sh

…