test(#337): Add workspaceId verification tests for multi-tenant isolation

Browse Source

- Verify tasks.service includes workspaceId in all queries
- Verify knowledge.service includes workspaceId in all queries
- Verify projects.service includes workspaceId in all queries
- Verify events.service includes workspaceId in all queries
- Add 39 tests covering create, findAll, findOne, update, remove operations
- Document security concern: findAll accepts empty query without workspaceId
- Ensures tenant isolation is maintained at query level

Refs #337

Co-Authored-By: Claude Opus 4.5 <[email protected]>

...

This commit is contained in:

Jason Woltje

2026-02-05 16:14:46 -06:00

co-authored by Claude Opus 4.5

parent 721d6d15c5

commit 8d542609ff

1 changed files with 1170 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

apps/api/src/common/tests/workspace-isolation.spec.ts

+1170

File diff suppressed because it is too large Load Diff