Issues

• refactor: extract _validate_safe_path into utils/validation.py for reuse across routers

  enhancement
  SckyzO/rackscope#41 · Filter by author SckyzO opened on May 13, 2026

• refactor: extract api/state.py to break circular import workaround and prepare plugin migration to Depends()

  enhancement
  SckyzO/rackscope#40 · Filter by author SckyzO opened on May 13, 2026

• test: cover _update_auth_config — remove # pragma: no cover from the auth credential writer

  enhancement
  SckyzO/rackscope#39 · Filter by author SckyzO opened on May 13, 2026

• fix(config): emit startup deprecation warning for legacy simulator/slurm config keys

  enhancement
  SckyzO/rackscope#38 · Filter by author SckyzO opened on May 13, 2026

• fix(loader): surface template/checks/metrics load errors as ERRORs and expose count in /api/system/health

  enhancement
  SckyzO/rackscope#37 · Filter by author SckyzO opened on May 13, 2026

• ci: tighten lint coverage, make security scans blocking, enforce coverage threshold

  enhancementsecurity
  SckyzO/rackscope#36 · Filter by author SckyzO opened on May 13, 2026

• cleanup: remove dead guard on _CONFIG_RELOAD_LOCK, fix lazy lock init, and resolve double assert_safe_id

  enhancement
  SckyzO/rackscope#35 · Filter by author SckyzO opened on May 13, 2026

• perf: replace O(n⁴) rack lookup with TopologyIndex and eliminate double topology scan in planner

  enhancement
  SckyzO/rackscope#34 · Filter by author SckyzO opened on May 13, 2026

• ci: make Trivy blocking on the published Docker image scan

  enhancementsecurity
  SckyzO/rackscope#33 · Filter by author SckyzO opened on May 13, 2026

• fix(plugins): log hot-reload failures instead of silencing them

  enhancement
  SckyzO/rackscope#32 · Filter by author SckyzO opened on May 13, 2026

• fix(docker): harden production docker-compose — remove direct backend port exposure and document TLS expectations

  enhancementsecurity
  SckyzO/rackscope#31 · Filter by author SckyzO opened on May 13, 2026

• fix(security): sanitize GET /api/config — exclude TLS file paths and add plugin sanitization contract

  enhancementsecurity
  SckyzO/rackscope#30 · Filter by author SckyzO opened on May 13, 2026

• feat(frontend): role-based access control UI — page guards, Users, API Tokens, Access Control

  enhancement
  SckyzO/rackscope#29 · Filter by author SckyzO opened on May 13, 2026

• feat(auth): file-based API tokens for external integrations (NetBox, BlueBanquise)

  enhancement
  SckyzO/rackscope#28 · Filter by author SckyzO opened on May 13, 2026

• feat(auth): local RBAC backend — multi-user accounts with viewer/editor/admin roles

  enhancement
  SckyzO/rackscope#27 · Filter by author SckyzO opened on May 13, 2026

• fix(security): add require_admin to mutation endpoints in topology, catalog, and config routers

  enhancementsecurity
  SckyzO/rackscope#26 · Filter by author SckyzO opened on May 13, 2026

• RBAC v1 — Phase 1: local-only authentication & authorization

  enhancementsecurity
  SckyzO/rackscope#25 · Filter by author SckyzO opened on May 13, 2026

• chore(security): audit and migrate all external runtime dependencies for fully offline deployments

  documentationenhancement
  SckyzO/rackscope#23 · Filter by author SckyzO opened on May 12, 2026

• chore(security): self-host Swagger UI and ReDoc assets to remove CDN dependency

  enhancement
  SckyzO/rackscope#22 · Filter by author SckyzO opened on May 12, 2026

• refactor(frontend): audit & standardize component usage across all pages

  enhancement
  SckyzO/rackscope#21 · Filter by author SckyzO opened on Apr 8, 2026