kolaente 49934adaaf feat(mcp): register mcp:access api token scope ... Adds the mcp scope group with a single access permission so it shows up in GET /api/v1/routes (and therefore in the frontend token form). Adds APIToken.HasMCPAccess() mirroring the caldav/feeds helpers. The MCP endpoint will use POST, GET, and DELETE on the same path for the streamable-HTTP transport, which CanDoAPIRoute's exact (method, path) match cannot gate. The token middleware therefore skips the route check for /api/v1/mcp and any sub-path; the actual authorization is delegated to an inline HasMCPAccess() call in the MCP handler (added in the next task). Fixtures gain two MCP tokens for user 1: one mcp-only and one with mcp:access plus projects read scopes for the per-tool scope filter tests.		2026-05-26 22:58:53 +02:00
..
api_tokens.yml	feat(mcp): register mcp:access api token scope	2026-05-26 22:58:53 +02:00
buckets.yml	fix(views): update test fixtures for new structure	2024-03-19 00:47:51 +01:00
favorites.yml	fix: fetch all tasks for all projects	2023-05-24 15:52:33 +02:00
files.yml	Migrate all timestamps to real iso dates (#594)	2020-06-27 17:04:01 +00:00
label_tasks.yml	fix(labels): derive label max permission from accessible tasks only	2026-04-09 15:43:04 +00:00
labels.yml	fix(labels): derive label max permission from accessible tasks only	2026-04-09 15:43:04 +00:00
license_status.yml	feat(license): add runtime state snapshot and reload helpers	2026-04-20 18:55:06 +00:00
link_shares.yml	feat!: rename right to permission (#1277)	2025-08-13 11:05:05 +02:00
oauth_codes.yml	feat: add OAuth 2.0 authorization code model and migration	2026-03-27 23:05:04 +00:00
project_views.yml	feat: support filter_include_nulls in project view configuration	2026-04-28 14:16:51 +00:00
projects.yml	test(fixtures): add child project for reparent escalation tests	2026-04-09 16:47:35 +00:00
reactions.yml	feat: emoji reactions for tasks and comments (#2196)	2024-03-12 19:25:58 +00:00
saved_filters.yml	fix(filter): translate all tests	2024-03-09 19:06:35 +01:00
sessions.yml	feat: add Session model with CRUD, permissions, and cleanup cron	2026-02-25 10:30:25 +01:00
subscriptions.yml	fix(subscriptions): correctly inherit subscriptions	2024-09-03 22:04:11 +02:00
task_assignees.yml	Migrate all timestamps to real iso dates (#594)	2020-06-27 17:04:01 +00:00
task_attachments.yml	test: add attachment fixture on inaccessible task for IDOR test	2026-03-23 16:34:07 +00:00
task_buckets.yml	feat(tasks): add tests for moving a task out of the done bucket	2024-06-18 13:40:41 +02:00
task_comments.yml	feat: emoji reactions for tasks and comments (#2196)	2024-03-12 19:25:58 +00:00
task_positions.yml	fix(views): update test fixtures for new structure	2024-03-19 00:47:51 +01:00
task_relations.yml	fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions	2026-04-05 12:20:35 +00:00
task_reminders.yml	test: add task #47 with reminders outside window for bug #2245	2026-02-19 12:40:29 +01:00
tasks.yml	feat(tasks): enforce unique (project_id, index) via migration	2026-04-11 20:44:28 +00:00
team_members.yml	fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions	2026-04-05 12:20:35 +00:00
team_projects.yml	fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions	2026-04-05 12:20:35 +00:00
teams.yml	fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions	2026-04-05 12:20:35 +00:00
totp.yml	fix: update TOTP reuse test to use user10 matching rebased fixture	2026-03-23 10:34:49 +00:00
user_tokens.yml	test: verify CalDAV token auth bypasses TOTP check	2026-03-20 12:22:27 +00:00
users.yml	feat(user): always include own bots in user search	2026-05-01 14:44:10 +00:00
users_projects.yml	test: add failing test for project background delete with read-only access	2026-03-20 11:41:28 +00:00
webhooks.yml	test: add BasicAuth credentials to webhook fixture	2026-03-23 16:35:47 +00:00