45f0241079
- SUMMARY.md with self-check passed - STATE.md updated to plan 3/3 complete, 100% progress - ROADMAP.md and REQUIREMENTS.md updated (SECU-04 complete) - deferred-items.md documents pre-existing test failures from Plan 02 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.1 KiB
1.1 KiB
Phase 04 — Deferred Items
Pre-existing Test Failures (from Plan 02 security integration)
These tests fail because Plan 02 introduced real Spring Security but did not update all existing integration tests to pass JWT auth headers. The security filter returns 403 before controllers can return the expected error codes.
- AgentSseControllerIT.sseConnect_unknownAgent_returns404 — expects 404, gets 403 (security blocks unauthenticated request)
- AgentCommandControllerIT.sendCommandToUnregisteredAgent_returns404 — expects 404, gets 403
- AgentCommandControllerIT.acknowledgeUnknownCommand_returns404 — expects 404, gets 403
- JwtRefreshIT (all 5 tests) — all failing, likely needs bootstrap token for agent registration step
Root cause: Plan 02 emptied TestSecurityConfig and activated real SecurityConfig, but did not update pre-existing ITs to include JWT auth or adjust expected status codes for unauthenticated requests.
Discovered during: Plan 03 execution (04-03) Scope: Out of scope for Plan 03 (pre-existing, not caused by signing changes)