4 Commits

Include renames

Author	SHA1	Message	Date
clawbot	128eb1b644	Keep test helpers out of the shipped binary (closes #506) ... The test helpers lived in ordinary `testing.go` files inside the config, database, middleware and session packages, so they were built into the binary and the shared `test-support` lint rule could not see them. The four files are gone: the session's helpers move into its own `_test.go` file, and the rest into `configtest`, `databasetest` and `middlewaretest`, which the `depguard` deny list now names, so a non-test file importing them fails lint. The test-support packages build through the production constructors. Judgement call: the session, the middleware and the webhook database manager now take the plain logger they log through, which the application wiring provides. Judgement call: two idle-expiry tests move the stored timestamps back instead of advancing a fake clock. Model: opus-5-5	2026-10-06 14:29:47 +02:00
clawbot	0f9b68a0e8	Build the middleware test cookie stores with the production constructor (closes #154) ... The middleware tests built their cookie stores by setting store.Options by hand, which left the securecookie codecs at the library's 30-day default instead of the 7-day cap production sets, an invisible divergence that would outlive the next change to store construction. The test store constructor moves from internal/session/export_test.go into internal/session/testing.go so other packages can reach it, and the two middleware test helpers build their stores through it. No test in the repo builds a cookie store by hand any more, and no assertion changes. Model: opus-5-5	2026-10-02 14:30:51 +02:00
clawbot	032f265d69	Derive cookie Secure and CSRF strictness from the request transport (closes #269)	2026-08-24 03:01:37 +02:00
clawbot	5f18bc3eae	Align session codec max-age with the 7-day cap (closes #108)	2026-08-14 06:17:43 +02:00