bot-backend
|
55e40814a6
|
feat(tradein/lead): persist 152-ФЗ proof-of-consent (client_ip, policy version, text snapshot)
CI Trade-In / changes (pull_request) Successful in 9s
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
CI / changes (pull_request) Successful in 9s
CI Trade-In / frontend-checks (pull_request) Has been skipped
CI / openapi-codegen-check (pull_request) Has been skipped
CI Trade-In / backend-tests (pull_request) Successful in 1m6s
Migration 182 adds nullable client_ip/consent_policy_version/consent_text_snapshot
to trade_in_leads; create_trade_in_lead now writes them (previously audit-log only,
#2497 TODO). Migrate-before-app (#2216 precedent). LOW audit R2 (#9).
|
2026-07-13 01:09:00 +03:00 |
|
bot-backend
|
0583fb0efd
|
fix(trade-in): усилить валидацию /lead и почистить контракт (#2376)
CI Trade-In / changes (pull_request) Successful in 12s
CI / changes (pull_request) Successful in 9s
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
CI / openapi-codegen-check (pull_request) Has been skipped
CI Trade-In / frontend-checks (pull_request) Has been skipped
CI Trade-In / backend-tests (pull_request) Successful in 58s
- [MED] phone: маска r"^[+]?[\d\s().-]{5,32}$" делала цифры опциональными
("(()) -- .." проходило) — добавлен field_validator, требующий 10-15
реальных цифр (re.sub(r"\D","")), формат-толерантность сохранена.
- [MED] source: убран мёртвый литерал "landing" из Literal — воронка
недостижима (rbac_guard закрывает /lead 401 без X-Authenticated-User,
публичного лендинг-роута нет), контракт больше не обещает невозможное.
- [LOW] 152-ФЗ: захват client_ip (X-Forwarded-For -> peer) и
_CONSENT_POLICY_VERSION в audit-лог; live-схема trade_in_leads не имеет
колонок под IP/policy/consent-snapshot -> TODO на follow-up миграцию
(out of scope), durable proof-of-consent gap задокументирован.
Тесты: +digit-free/too-few-digits phone 422, +source=landing 422,
estimate-тест переведён на source=result. 9/9 pass, ruff clean.
|
2026-07-12 22:19:20 +03:00 |
|
