0b6a664651
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
The "Export Configuration" admin feature (GET/POST /admin/export-config, /admin/import-config) was already fully implemented — admin-gated, redacts secrets, scoped to genuine config (settings/webhooks/SSO/scoring/ custom templates/users) rather than bulk data — but had zero test coverage for an admin-sensitive data-migration endpoint. Adds coverage for: admin-only gating on both endpoints, secret redaction (SMTP password, SSO private key), custom-template-only scoping, safe user import (forced password reset, no secret restoration from "[REDACTED]" placeholders), and round-trip import idempotency. All pass against the existing implementation — no bugs found.