claude code agent 227 7c57a386b2 test(mcp): coupling guard between enforceBasicLoginGate and login (#91) ...

McpService.enforceBasicLoginGate re-implements AuthController.login's pre-token
SSO/MFA gate; silent drift would re-open the bypass. Add an AST contract test
(comments stripped) asserting BOTH method bodies contain validateSsoEnforcement,
the EE-MFA require, and checkMfaRequirements — so dropping the gate from either
side fails CI. Test-only (no core/auth refactor).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-21 03:49:52 +03:00

..

client

fix(ai-roles): validate chatModel + guard driver-enum drift (#52)

2026-06-21 03:28:58 +03:00

server

test(mcp): coupling guard between enforceBasicLoginGate and login (#91)

2026-06-21 03:49:52 +03:00