Fix/idor auth Fix IDOR and Broken Authentication Vulnerability on Protected Endpoints - #208

Open

Unnati1007 wants to merge 9 commits into

vanshaggarwal27:mainfrom

Unnati1007:fix/idor-auth

Commits on Jun 11, 2026

Fix IDOR and broken auth by replacing X-User-Email with JWT validation across dashboard and blog endpoints
Unnati1007
committed
f1985dd
Fix undefined name errors and unused variables in main.py
Unnati1007
committed
eb4732d
Fix test hanging by using autouse mock fixtures for all external API calls
Unnati1007
committed
41b6a1f
Fix Ruff linting errors: undefined names, unused variables, and imports
Unnati1007
committed
2bbd286
Fix tests for auth routes and devto publisher await
Unnati1007
committed
49caf23
Fix ruff imports in test_auth_settings
Unnati1007
committed
d84a1fe

Commits on Jun 12, 2026

Debug CI pytest failure by uploading log
Unnati1007
committed
1391c99
Upload log to termbin
Unnati1007
committed
7414a70
Commit log back
Unnati1007
committed
b7770a1