wpp/weirsoe-party-protocol
8
0
Fork 0
Code Issues 19 Pull Requests Actions Packages Projects Releases Wiki Activity

F3 need-to-have: spiller-session-token for lie submit #35

New Issue
Closed
opened 2026-02-27 23:05:40 +01:00 by dev-bot · 0 comments
dev-bot commented 2026-02-27 23:05:40 +01:00
Owner
Copy Link
Copy Source

Scope-kilde: #16 (faseboard) + #17 (guardrail).

Need-to-have sikkerhed: submit_lie må ikke stole på player_id fra payload alene.

Definition of done:

  • Endpoint kræver spiller-session-token
  • Token valideres server-side før lie submit
  • Negativ tests for ugyldig/manglende token
  • Eksisterende flow-tests forbliver grønne
Scope-kilde: #16 (faseboard) + #17 (guardrail). Need-to-have sikkerhed: `submit_lie` må ikke stole på `player_id` fra payload alene. Definition of done: - Endpoint kræver spiller-session-token - Token valideres server-side før lie submit - Negativ tests for ugyldig/manglende token - Eksisterende flow-tests forbliver grønne
dev-bot added the need-to-have label 2026-02-27 23:05:50 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
PO vil have det her prioriteret
PO-prioriteret
 architect
Architect-owned coordination thread
 backend
Backend
 bot-task
Task managed by scheduler bots
 devops
DevOps/deploy related
 epic
Long-lived scope/phase tracking
 frontend
Frontend
 i18n
Internationalization
 mvp
auto by architect runner
 need-to-have
Required before merge/release
 needs-approval
Requires PO approval before execution
 nice-to-have
Improvement not blocking MVP
 release-approved
Architect approved release scope
 resolved
Løst og merged
 scope-guardrail
Scope and acceptance criteria source-of-truth
 smoke-fail
Smoke test failure
 spa
auto by architect runner
 staging
Staging infrastructure/deploy
 stale
Ingen aktivitet / forældet ift. main
 ui
Frontend/UI related
No labels need-to-have
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
architecture-bot dev-bot email-manager integrator-bot manager-bot reviewer-bot scheduler-bot tester-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: wpp/weirsoe-party-protocol#35