Sicherheit + Tests + A11y, SW by-v1118
PYDANTIC max_length (38 Routen, ~400 Field-Constraints): Schützt vor DoS durch Riesen-Payloads (10MB Thread-Titel etc.). Pragmatische Limits: - Titel/Name: 200 · Beschreibung/Body: 10000 · Notiz: 5000 - Email: 254 (RFC 5321) · URL: 500 · Slug/Kategorie: 100 - Hund-Name/Rasse: 80 · Hund-Bio: 2000 Top-betroffen: forum.py, diary.py, health.py, dogs.py, expenses.py, notes.py, auth.py, profile.py. Manuelle len()-Checks in profile, chat, ki entfernt (jetzt durch Field abgedeckt). PYTEST COVERAGE (+19 Tests, 37 grün + 1 xfail): - test_security.py: require_owner (Places GET/PATCH/DELETE mit Fremduser → 403), JWT-Blacklist (Logout invalidiert Token), Login-Lockout (5 Fehlversuche → 429 + Retry-After Header) - test_race.py: Invoice-Counter (20 parallele Threads, alle unique), Founder-Number (atomare Vergabe, voll bei 100) - test_validation.py: Forum-Titel 30k Zeichen → 422, Diary-Text 50k → 422 (verifiziert Pydantic max_length-Sweep) A11Y (Tap-Targets ≥44×44 + Dark-Mode-Kontrast): - #header-user-btn 36→44px, .header-back 40→44, .header-menu-btn 40→44 - dog-profile Wrapped-Slider Prev/Next 40→44 - forum-Lightbox Close 40→44 - --c-text-muted Light: #B0A090 (2.37:1 FAIL) → #7F6B58 (4.74:1 PASS) - --c-text-muted Dark: #806A58 (3.58:1 FAIL) → #A08878 (5.46:1 PASS) - Branding-Farben unangetastet
This commit is contained in:
parent
7751d303bb
commit
1ff66a7083
57 changed files with 1253 additions and 612 deletions
|
|
@ -2,7 +2,7 @@
|
|||
|
||||
import logging
|
||||
from fastapi import APIRouter, Depends, HTTPException, Query
|
||||
from pydantic import BaseModel
|
||||
from pydantic import BaseModel, Field
|
||||
from typing import Optional
|
||||
|
||||
from database import db
|
||||
|
|
@ -134,108 +134,108 @@ def _ik_rating(ik: float) -> str:
|
|||
# Pydantic-Schemas
|
||||
# ------------------------------------------------------------------
|
||||
class HundCreate(BaseModel):
|
||||
name: str
|
||||
rufname: Optional[str] = None
|
||||
geschlecht: str # maennlich|weiblich
|
||||
geburtsdatum: Optional[str] = None
|
||||
sterbedatum: Optional[str] = None
|
||||
chip_nr: Optional[str] = None
|
||||
taetowiernummer: Optional[str] = None
|
||||
zuchtbuchnummer: Optional[str] = None
|
||||
farbe: Optional[str] = None
|
||||
name: str = Field(..., min_length=1, max_length=200)
|
||||
rufname: Optional[str] = Field(None, max_length=80)
|
||||
geschlecht: str = Field(..., max_length=20) # maennlich|weiblich
|
||||
geburtsdatum: Optional[str] = Field(None, max_length=32)
|
||||
sterbedatum: Optional[str] = Field(None, max_length=32)
|
||||
chip_nr: Optional[str] = Field(None, max_length=50)
|
||||
taetowiernummer: Optional[str] = Field(None, max_length=50)
|
||||
zuchtbuchnummer: Optional[str] = Field(None, max_length=100)
|
||||
farbe: Optional[str] = Field(None, max_length=100)
|
||||
vater_id: Optional[int] = None
|
||||
mutter_id: Optional[int] = None
|
||||
zuechter_name: Optional[str] = None
|
||||
eigentuemer_name: Optional[str] = None
|
||||
zuechter_name: Optional[str] = Field(None, max_length=200)
|
||||
eigentuemer_name: Optional[str] = Field(None, max_length=200)
|
||||
is_public: int = 1
|
||||
notiz: Optional[str] = None
|
||||
foto_url: Optional[str] = None
|
||||
notiz: Optional[str] = Field(None, max_length=5000)
|
||||
foto_url: Optional[str] = Field(None, max_length=500)
|
||||
|
||||
|
||||
class HundUpdate(BaseModel):
|
||||
name: Optional[str] = None
|
||||
rufname: Optional[str] = None
|
||||
geschlecht: Optional[str] = None
|
||||
geburtsdatum: Optional[str] = None
|
||||
sterbedatum: Optional[str] = None
|
||||
chip_nr: Optional[str] = None
|
||||
taetowiernummer: Optional[str] = None
|
||||
zuchtbuchnummer: Optional[str] = None
|
||||
farbe: Optional[str] = None
|
||||
name: Optional[str] = Field(None, max_length=200)
|
||||
rufname: Optional[str] = Field(None, max_length=80)
|
||||
geschlecht: Optional[str] = Field(None, max_length=20)
|
||||
geburtsdatum: Optional[str] = Field(None, max_length=32)
|
||||
sterbedatum: Optional[str] = Field(None, max_length=32)
|
||||
chip_nr: Optional[str] = Field(None, max_length=50)
|
||||
taetowiernummer: Optional[str] = Field(None, max_length=50)
|
||||
zuchtbuchnummer: Optional[str] = Field(None, max_length=100)
|
||||
farbe: Optional[str] = Field(None, max_length=100)
|
||||
vater_id: Optional[int] = None
|
||||
mutter_id: Optional[int] = None
|
||||
zuechter_name: Optional[str] = None
|
||||
eigentuemer_name: Optional[str] = None
|
||||
zuechter_name: Optional[str] = Field(None, max_length=200)
|
||||
eigentuemer_name: Optional[str] = Field(None, max_length=200)
|
||||
is_public: Optional[int] = None
|
||||
notiz: Optional[str] = None
|
||||
foto_url: Optional[str] = None
|
||||
notiz: Optional[str] = Field(None, max_length=5000)
|
||||
foto_url: Optional[str] = Field(None, max_length=500)
|
||||
|
||||
|
||||
class HealthTestCreate(BaseModel):
|
||||
test_typ: str # HD|ED|OCD|augen|herz|patella|ZTP|custom
|
||||
test_name: Optional[str] = None
|
||||
ergebnis: Optional[str] = None
|
||||
untersuch_am: Optional[str] = None
|
||||
gueltig_bis: Optional[str] = None
|
||||
untersucher: Optional[str] = None
|
||||
labor: Optional[str] = None
|
||||
zertifikat_nr: Optional[str] = None
|
||||
test_typ: str = Field(..., max_length=50) # HD|ED|OCD|augen|herz|patella|ZTP|custom
|
||||
test_name: Optional[str] = Field(None, max_length=200)
|
||||
ergebnis: Optional[str] = Field(None, max_length=500)
|
||||
untersuch_am: Optional[str] = Field(None, max_length=32)
|
||||
gueltig_bis: Optional[str] = Field(None, max_length=32)
|
||||
untersucher: Optional[str] = Field(None, max_length=200)
|
||||
labor: Optional[str] = Field(None, max_length=200)
|
||||
zertifikat_nr: Optional[str] = Field(None, max_length=100)
|
||||
is_public: int = 1
|
||||
|
||||
|
||||
class HealthTestUpdate(BaseModel):
|
||||
test_typ: Optional[str] = None
|
||||
test_name: Optional[str] = None
|
||||
ergebnis: Optional[str] = None
|
||||
untersuch_am: Optional[str] = None
|
||||
gueltig_bis: Optional[str] = None
|
||||
untersucher: Optional[str] = None
|
||||
labor: Optional[str] = None
|
||||
zertifikat_nr: Optional[str] = None
|
||||
test_typ: Optional[str] = Field(None, max_length=50)
|
||||
test_name: Optional[str] = Field(None, max_length=200)
|
||||
ergebnis: Optional[str] = Field(None, max_length=500)
|
||||
untersuch_am: Optional[str] = Field(None, max_length=32)
|
||||
gueltig_bis: Optional[str] = Field(None, max_length=32)
|
||||
untersucher: Optional[str] = Field(None, max_length=200)
|
||||
labor: Optional[str] = Field(None, max_length=200)
|
||||
zertifikat_nr: Optional[str] = Field(None, max_length=100)
|
||||
is_public: Optional[int] = None
|
||||
|
||||
|
||||
class GeneticTestCreate(BaseModel):
|
||||
marker_name: str # MDR1|PRA-prcd|DM|vWD|HUU etc.
|
||||
marker_kategorie: Optional[str] = None # krankheit|farbe|eigenschaft
|
||||
genotyp: Optional[str] = None # +/+|+/-|-/-
|
||||
ergebnis_klasse: Optional[str] = None # clear|carrier|affected
|
||||
getestet_am: Optional[str] = None
|
||||
labor: Optional[str] = None
|
||||
zertifikat_nr: Optional[str] = None
|
||||
marker_name: str = Field(..., max_length=100) # MDR1|PRA-prcd|DM|vWD|HUU etc.
|
||||
marker_kategorie: Optional[str] = Field(None, max_length=50) # krankheit|farbe|eigenschaft
|
||||
genotyp: Optional[str] = Field(None, max_length=20) # +/+|+/-|-/-
|
||||
ergebnis_klasse: Optional[str] = Field(None, max_length=50) # clear|carrier|affected
|
||||
getestet_am: Optional[str] = Field(None, max_length=32)
|
||||
labor: Optional[str] = Field(None, max_length=200)
|
||||
zertifikat_nr: Optional[str] = Field(None, max_length=100)
|
||||
is_public: int = 1
|
||||
|
||||
|
||||
class GeneticTestUpdate(BaseModel):
|
||||
marker_name: Optional[str] = None
|
||||
marker_kategorie: Optional[str] = None
|
||||
genotyp: Optional[str] = None
|
||||
ergebnis_klasse: Optional[str] = None
|
||||
getestet_am: Optional[str] = None
|
||||
labor: Optional[str] = None
|
||||
zertifikat_nr: Optional[str] = None
|
||||
marker_name: Optional[str] = Field(None, max_length=100)
|
||||
marker_kategorie: Optional[str] = Field(None, max_length=50)
|
||||
genotyp: Optional[str] = Field(None, max_length=20)
|
||||
ergebnis_klasse: Optional[str] = Field(None, max_length=50)
|
||||
getestet_am: Optional[str] = Field(None, max_length=32)
|
||||
labor: Optional[str] = Field(None, max_length=200)
|
||||
zertifikat_nr: Optional[str] = Field(None, max_length=100)
|
||||
is_public: Optional[int] = None
|
||||
|
||||
|
||||
class TitelCreate(BaseModel):
|
||||
titel_typ: str # ausstellung|arbeit|sport|zucht|champion|custom
|
||||
titel_name: str
|
||||
verliehen_am: Optional[str] = None
|
||||
ort: Optional[str] = None
|
||||
richter: Optional[str] = None
|
||||
ausstellung: Optional[str] = None
|
||||
formwert: Optional[str] = None
|
||||
titel_typ: str = Field(..., max_length=50) # ausstellung|arbeit|sport|zucht|champion|custom
|
||||
titel_name: str = Field(..., min_length=1, max_length=200)
|
||||
verliehen_am: Optional[str] = Field(None, max_length=32)
|
||||
ort: Optional[str] = Field(None, max_length=200)
|
||||
richter: Optional[str] = Field(None, max_length=200)
|
||||
ausstellung: Optional[str] = Field(None, max_length=200)
|
||||
formwert: Optional[str] = Field(None, max_length=100)
|
||||
is_public: int = 1
|
||||
|
||||
|
||||
class TitelUpdate(BaseModel):
|
||||
titel_typ: Optional[str] = None
|
||||
titel_name: Optional[str] = None
|
||||
verliehen_am: Optional[str] = None
|
||||
ort: Optional[str] = None
|
||||
richter: Optional[str] = None
|
||||
ausstellung: Optional[str] = None
|
||||
formwert: Optional[str] = None
|
||||
titel_typ: Optional[str] = Field(None, max_length=50)
|
||||
titel_name: Optional[str] = Field(None, max_length=200)
|
||||
verliehen_am: Optional[str] = Field(None, max_length=32)
|
||||
ort: Optional[str] = Field(None, max_length=200)
|
||||
richter: Optional[str] = Field(None, max_length=200)
|
||||
ausstellung: Optional[str] = Field(None, max_length=200)
|
||||
formwert: Optional[str] = Field(None, max_length=100)
|
||||
is_public: Optional[int] = None
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue