fix: cap /api/discovery/ping at 4096 IPs and fix test suite

- Add MAX_PING_IPS=4096 constant and validate list size in PingRequest
  before spawning futures, returning 422 on overflow
- Add test_ping_too_many_ips_rejected to cover the new cap
- Pin httpx<0.28 in requirements-test.txt (0.28 broke TestClient API)
- Fix reset_db fixture to set a known admin password regardless of
  INITIAL_ADMIN_PASSWORD env var (was causing 401 on all auth tests)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

This commit is contained in:

Olivier

2026-05-18 18:16:08 +02:00

parent ec669c87b4

commit e8ca10f1b7

3 changed files with 20 additions and 2 deletions

backend/requirements-test.txt

+1 -1

View File

@@ -1,2 +1,2 @@
 pytest>=7.4
 httpx>=0.25
 httpx>=0.25,<0.28