Donkie 3f1d3b4c7b Fix mixed naive/aware clocks in the scan relay, and hand off the frontend ...

register() kept datetime.utcnow() while should_broadcast() and readers() moved
to datetime.now(tz=utc), so the naive last_seen it stored was compared against
an aware cutoff during pruning: GET /tag/reader raised "can't compare
offset-naive and offset-aware datetimes" as soon as any reader had scanned.

The existing unit tests could not catch it because they inject `now` into every
call. Added one that exercises each method's own clock instead.

Also adds design/nfc-phase-1-frontend-handoff.md: the API shapes the client
will consume, the behaviours it has to get right, two stale paths in the phase
1 doc's frontend plan, and the open UI decisions.

2026-08-14 23:03:05 +02:00

..

__init__.py

security: add shared origin-trust helper

2026-07-27 08:51:11 +02:00

conftest.py

Test config.js rendering without importing main

2026-07-31 10:00:47 +02:00

test_backup_rotation.py

security: stop backup rotation from churning away the restore history

2026-07-27 19:33:07 +02:00

test_color_hex_validation.py

fix(api): repair filament rows already stored with a leading #

2026-08-02 00:22:27 -07:00

test_configjs.py

Test config.js rendering without importing main

2026-07-31 10:00:47 +02:00

test_env.py

security: add shared origin-trust helper

2026-07-27 08:51:11 +02:00

test_export.py

security: escape CSV formulas and bound extra-field sizes

2026-07-27 19:58:52 +02:00

test_extra_field_registry.py

security: escape CSV formulas and bound extra-field sizes

2026-07-27 19:58:52 +02:00

test_host_validation.py

security: make the host guard opt-in

2026-07-31 09:36:41 +02:00

test_like_escaping.py

security: finish the audit's low-severity items

2026-07-31 09:42:32 +02:00

test_scan_relay.py

Fix mixed naive/aware clocks in the scan relay, and hand off the frontend

2026-08-14 23:03:05 +02:00

test_security.py

security: drop CORS credentials under a wildcard origin, document the model

2026-07-27 19:36:47 +02:00

test_sort_parsing.py

fix: return 400 instead of 500 for malformed sort parameters

2026-07-27 20:03:14 +02:00

test_tag_uid.py

NFC phase 1 backend: tag identity, lookup, and the scan relay

2026-08-13 18:56:35 +02:00

test_ws_broadcast.py

Fix one dead websocket subscriber starving a whole pool

2026-08-13 18:56:16 +02:00