3 commits

Author	SHA1	Message	Date
Jeremie Fraeys	37c4d4e9c7	feat(crypto,auth): harden KMS and improve permission handling ... KMS improvements: - cache.go: add LRU eviction with memory-bounded caches - provider.go: refactor provider initialization and key rotation - tenant_keys.go: per-tenant key isolation with envelope encryption Auth layer updates: - hybrid.go: refine hybrid auth flow for API key + JWT - permissions_loader.go: faster permission caching with hot-reload - validator.go: stricter validation with detailed error messages Security middleware: - security.go: add rate limiting headers and CORS refinement Testing and benchmarks: - Add KMS cache and protocol unit tests - Add KMS benchmark tests for encryption throughput - Update KMS integration tests for tenant isolation	2026-03-12 12:04:32 -04:00
Jeremie Fraeys	5f53104fcd	test: modernize test suite for streamlined infrastructure ... - Update E2E tests for consolidated docker-compose.test.yml - Remove references to obsolete logs-debug.yml - Enhance test fixtures and utilities - Improve integration test coverage for KMS, queue, scheduler - Update unit tests for config constants and worker execution - Modernize cleanup-status.sh with new Makefile targets	2026-03-04 13:24:24 -05:00
Jeremie Fraeys	16343e6c2a	test(kms): add comprehensive unit and integration tests ... Unit tests for DEK cache: - Put/Get operations, TTL expiry, LRU eviction - Tenant isolation, flush/clear, stats, empty DEK rejection Unit tests for KMS protocol: - Encrypt/decrypt round-trip with MemoryProvider - Multi-tenant isolation (wrong key fails MAC verification) - Cache hit verification, key rotation flow - Health check protocol Integration tests with testcontainers: - VaultProvider with hashicorp/vault:1.15 container - AWSProvider with localstack/localstack container - TenantKeyManager end-to-end with MemoryProvider	2026-03-03 19:14:31 -05:00