jubnl 535c06bb3f feat(mcp): granular OAuth scopes and per-client rate limiting ... - Split `media:read` into `geo:read` and `weather:read` scopes - Add dedicated `atlas:read/write` scopes (previously under `places`) - Add dedicated `todos:read/write` scopes (previously under `collab`) - Rate limiting now keyed by userId+clientId instead of userId alone - Bind MCP sessions to the OAuth client that created them - Log MCP tool calls to audit log with clientId - Invalidate all MCP sessions on addon state change - Reduce session sweep interval from 10min to 1min - Update all translations with new scope labels		2026-04-11 02:06:32 +02:00
..
fixtures	Add comprehensive backend test suite (#339)	2026-04-03 13:17:53 +02:00
helpers	test(mcp): add tests for OAuth 2.1, addon gating, and budget reorder	2026-04-09 23:12:59 +02:00
integration	security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)	2026-04-10 02:03:27 +02:00
unit	feat(mcp): granular OAuth scopes and per-client rate limiting	2026-04-11 02:06:32 +02:00
websocket	test: expand test suite to 87.3% backend coverage	2026-04-06 20:08:30 +02:00
setup.ts	Add comprehensive backend test suite (#339)	2026-04-03 13:17:53 +02:00