H1K0 12d4dbcbb2 test(backend): regression tests for the security fixes ...

Cover the refresh-token flow (works, not usable as an access token, and
revokes the rotated-away access token), non-owner denial on object ACLs /
file tags / import, and immediate session revocation on user block.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 14:19:41 +03:00

..

server_test.go

test(backend): regression tests for the security fixes

2026-06-10 14:19:41 +03:00