provvedo/wiregui
2
0
Fork 0
Code Issues Pull requests Projects Releases 6 Packages 1 Wiki Activity Actions

fix: address CodeQL findings — sha512 for token hashing, secure tempfile

Browse source
This commit is contained in:
Stefano Bertelli 2026-04-03 00:41:16 -05:00
parent aa38c3797e
commit 5c02598a46
3 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tests/e2e/test_idp_seed.py
View file

@ -166,8 +166,10 @@ async def test_seed_preserves_providers_not_in_yaml(clean_config, monkeypatch):
async def test_seed_invalid_yaml(clean_config, monkeypatch):
path = Path(tempfile.mktemp(suffix=".yaml"))
path.write_text(": : : invalid yaml [[[")
f = tempfile.NamedTemporaryFile(suffix=".yaml", delete=False, mode="w")
f.write(": : : invalid yaml [[[")
f.close()
path = Path(f.name)
monkeypatch.setattr("wiregui.auth.seed.get_settings", lambda: type("S", (), {"idp_config_file": str(path)})())
await seed_idp_providers()
async with async_session() as session: