Antoine Van Elstraete
68a5d96c2a
feat: add TLS policy and field constraints to XmppSettings (M10-U1)
Enforce TLS on non-loopback hosts via @field_validator on use_tls,
and add unconditional Field constraints on port (1-65535) and timeout (>0).
Security:
- use_tls=False rejected outside {localhost, 127.0.0.1, ::1} regardless of enabled
- field_validator on use_tls (not model_validator) prevents raw config leakage
- hide_input_in_errors=True as defense-in-depth
- Validation error messages contain no secrets (jid, password, recipient)
16 unit tests covering port/timeout bounds, TLS policy, loopback, secret safety.
Co-authored-by: opencode/test-engineer <test-engineer@agents.invalid>
Co-authored-by: opencode/coder <coder@agents.invalid>
2026-09-07 21:01:48 +02:00
..
2026-09-06 11:59:50 +02:00
2026-09-06 20:58:04 +02:00
2026-09-06 20:58:04 +02:00
2026-09-07 12:24:22 +02:00
2026-09-07 12:24:22 +02:00
2026-09-07 12:24:22 +02:00
2026-09-07 12:24:22 +02:00
2026-09-06 12:35:55 +02:00
2026-09-07 15:59:17 +02:00
2026-09-07 21:01:36 +02:00
2026-09-06 17:42:04 +02:00
2026-09-06 15:23:34 +02:00
2026-09-07 15:59:17 +02:00
2026-09-06 12:36:27 +02:00
2026-09-07 15:59:17 +02:00
2026-09-06 15:36:42 +02:00
2026-09-07 19:01:25 +02:00
2026-09-06 11:59:50 +02:00
2026-09-07 09:24:18 +02:00
2026-09-07 19:44:40 +02:00
2026-09-06 23:06:29 +02:00
2026-09-06 23:06:29 +02:00
2026-09-06 23:06:29 +02:00
2026-09-06 23:06:29 +02:00
2026-09-06 23:30:47 +02:00
2026-09-07 09:24:18 +02:00
2026-09-07 21:01:48 +02:00