UMBRA

History

Kyle Pope 2f58282c31 M-01+M-03: Add input validation and extra=forbid to all request schemas

- Add max_length constraints to all string fields in request schemas,
  matching DB column limits (title:255, description:5000, etc.)
- Add min_length=1 to required name/title fields
- Add ConfigDict(extra="forbid") to all request schemas to reject
  unknown fields (prevents silent field injection)
- Add Path(ge=1, le=2147483647) to all integer path parameters across
  all routers to prevent integer overflow → 500 errors
- Add max_length to TOTP inline schemas (code:6, mfa_token:256, etc.)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-27 15:43:55 +08:00

__init__.py

Address all QA review warnings and suggestions for lock screen feature

2026-02-25 18:20:42 +08:00

admin.py

Add per-user active session counts to IAM user list

2026-02-27 13:26:32 +08:00

auth.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

calendar_event.py

M-01+M-03: Add input validation and extra=forbid to all request schemas