J3vbandClaude Fable 5 f70158096a fix(service): verify-totp reports a store fault as 500, uncounted (OC-0377) ...

challengeSecret folded a GetUserByID error into the same 401 "invalid or
expired two-factor challenge" an expired challenge earns, and the attempt
had already been charged to the per-user totp_fail cap. Split the outcome:
a store error logs and returns the new service.ErrTOTPUnavailable
(ErrInternal, "two-factor verification temporarily unavailable"); an unknown
user or a missing secret still answers 401. The limiter reservation moves
after the store read — the rule authenticate already applies — and still
precedes the code compare, so the check-then-act it closes stays closed.

Characterization row flipped in the same commit: `VerifyTOTPFailurePaths/
user lookup fails -> 500, challenge kept, attempt not counted` — after the
fault ten wrong codes still answer 401 (the tenth would be 429 had the
fault counted), then the eleventh is refused. `per-user failure cap spans
challenges` unchanged.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A17Uq3d2C36rN82Jitf3wo

2026-08-30 10:25:19 +02:00

..

testdata/fuzz

Release v1.2.0-alpha.1 -> main (#1309)

2026-08-01 22:06:14 +02:00

absence_contract_test.go

docs(b2-7): trust model, absence proofs, plugin boundary (#1443)

2026-08-29 11:49:24 +00:00

audit_coverage_plugin_test.go

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

audit_coverage_test.go

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

auth_characterization_test.go

fix(service): verify-totp reports a store fault as 500, uncounted (OC-0377)

2026-08-30 10:25:19 +02:00

auth_deps.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

auth_handler_delete_broadcast_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

auth_handler_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

auth_handler.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

avatar_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

blocks_handler_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

bodycap_test.go

fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331)

2026-08-07 21:20:48 +02:00

channel_around_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

channel_authz_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

channel_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

channel_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

channel_reaction_users_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

client_update_epoch_test.go

feat(b2-2): protocol epoch and negotiation (slim) (#1438)

2026-08-29 07:23:06 +02:00

client_update_test.go

test(b2-1): capture the epoch-1 protocol fixtures and retire S-15 (#1435)

2026-08-28 15:43:30 +02:00

client_update.go

feat(b2-2): protocol epoch and negotiation (slim) (#1438)

2026-08-29 07:23:06 +02:00

clientip_test.go

Fix 27 findings from 2026-08-21 bug hunt (#1400)

2026-08-21 12:41:56 +02:00

constants_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

constants.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

contract_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_push_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

crs_fs_test.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)

2026-07-31 15:41:57 +02:00

crs_fs.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)

2026-07-31 15:41:57 +02:00

diagnostics_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

diagnostics_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_group_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_block_context_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_create_notify_test.go

fix: correctness fixes from the 2026-08-20 bug hunt (#1398)

2026-08-20 20:45:30 +02:00

dm_handler_presence_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_rename_participant_lookup_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_visibility_ctx_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

dm_handler_watermark_voice_test.go

fix: execute the 2026-08-19 audit fix order (docs refresh + five FRAGILE fixes) (#1396)

2026-08-20 03:49:13 +02:00

dm_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

emoji_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

emoji_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

export_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

filestore.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

gif_handler_internal_test.go

fix: batch of 25 correctness fixes across server and client (#1370)

2026-08-14 14:49:27 +02:00

gif_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

gif_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

health_test.go

infra: observability, backups, guardrails, and deployment hardening (#1376)

2026-08-15 20:50:47 +02:00

image_dimensions_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309)

2026-08-01 22:06:14 +02:00

invite_handler_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

invite_handler.go

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

livekit_proxy_test.go

release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296)

2026-07-31 18:30:31 +02:00

livekit_proxy_ws_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

livekit_proxy.go

release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296)

2026-07-31 18:30:31 +02:00

livekit_ratelimit_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

logbounds_test.go

fix(api): bound the logged request id and path (F8)

2026-07-30 15:13:48 +02:00

main_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

metrics_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

metrics_handler.go

infra: observability, backups, guardrails, and deployment hardening (#1376)

2026-08-15 20:50:47 +02:00

middleware_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

middleware.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

plugins_handler_test.go

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

plugins_handler.go

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

profile_handler_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309)

2026-08-01 22:06:14 +02:00

profile_handler_identity_key_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

profile_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

profile_handler.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

recoverer_otel_test.go

fix(api): panic log carries trace_id — tracing ahead of recoverer (OC-0346)

2026-08-30 10:13:04 +02:00

router_delete_account_broadcast_test.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

router_livekit_process_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

router_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

router_totp_key_fatal_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

router.go

fix(api): panic log carries trace_id — tracing ahead of recoverer (OC-0346)

2026-08-30 10:13:04 +02:00

totp_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

totp_handler.go

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

upload_filename_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309)

2026-08-01 22:06:14 +02:00

upload_handler_deleted_message_test.go

fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331)

2026-08-07 21:20:48 +02:00

upload_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

upload_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

waf_crs_test.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)

2026-07-31 15:41:57 +02:00

waf_test.go

test: audit 2026-08-19 — fix stale tests, close coverage gaps (#1397)

2026-08-20 19:29:31 +02:00

waf.go

refactor(server): work off the complexity backlog — 62 findings to 0 (#1389)

2026-08-18 20:39:45 +02:00