mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 20:42:43 +00:00
Marc-André Bombeck
e33700c7a9
The switcher and the banner named a shared record's owner by their greeting name — the value they typed at onboarding for "how should HealthLog address you". When an owner has set a full name, that is what a delegate should see: entering somebody's record, you read whose it is by who they are. - the account-access resolver publishes the owner's `fullName` alongside the greeting name and the username - `accountLabel` prefers fullName, then displayName, then username. Optional on the argument so the grant-view and actor shapes that never carried it keep the old two-field behaviour untouched - the closed presentation schema carries `fullName` and its parity matcher compares it, so the two published views of the active record cannot name the same owner differently - the OpenAPI contract regenerates with the additive field This deliberately discloses the owner's full name to every delegate, read-only included — it was patient-identity data behind a MANAGE-gated export until now. That is the intended behaviour, documented at `accountLabel` so it is not mistaken for a leak and tightened back. The resolver, the schema parity, the label fallback and a read-only delegate's banner are each pinned by a test.
29 lines
889 B
TypeScript
29 lines
889 B
TypeScript
/**
|
|
* Re-export pin for the seeded test-user identity. The cookie jar that
|
|
* authenticates each spec is captured ONCE in `global-setup.ts` and the
|
|
* specs reach for it via `STORAGE_STATE_PATH` directly. We keep this
|
|
* file (instead of a barrel inside global-setup) only so future helpers
|
|
* specific to the spec-side (e.g. multi-user scenarios that need
|
|
* fresh logins) have a natural home.
|
|
*/
|
|
export {
|
|
E2E_USER,
|
|
E2E_OWNER,
|
|
E2E_OWNER_FULL_NAME,
|
|
E2E_GUARDIAN,
|
|
E2E_SCOPE_DELEGATE,
|
|
E2E_SCOPE_RECORDS,
|
|
E2E_LEVEL_RECORDS,
|
|
E2E_DELEGATE_MARKER_KG,
|
|
E2E_OWNER_MARKER_KG,
|
|
STORAGE_STATE_PATH,
|
|
OWNER_STORAGE_STATE_PATH,
|
|
DELEGATE_STORAGE_STATE_PATH,
|
|
SCOPE_DELEGATE_STORAGE_STATE_PATH,
|
|
SCOPE_A11Y_STORAGE_STATE_PATH,
|
|
FENCE_STORAGE_STATE_PATH,
|
|
FENCE_OFFLINE_STORAGE_STATE_PATH,
|
|
CROSS_TAB_STORAGE_STATE_PATH,
|
|
GUARDIAN_STORAGE_STATE_PATH,
|
|
} from "./global-setup";
|