Harden sessions, uploads, admin demotion, and HTTP timeouts.

Address PR review findings: renew session tokens on auth, sniff/re-encode avatars, serialize last-admin checks, bound server timeouts, rune-safe truncation, and TEST_DATABASE_URL-only integration tests.
2026-08-22 07:24:39 -07:00
parent 247fb05281
commit afd2476f3c
11 changed files with 113 additions and 36 deletions
@@ -9,10 +9,7 @@ import (
 func TestSessionStoreCommitFindDelete(t *testing.T) {
 	url := os.Getenv("TEST_DATABASE_URL")
 	if url == "" {
-		url = os.Getenv("DATABASE_URL")
-	}
-	if url == "" {
-		t.Skip("DATABASE_URL or TEST_DATABASE_URL not set")
+		t.Skip("TEST_DATABASE_URL not set")
 	}
 	schema, err := os.ReadFile("../../schema.sql")
 	if err != nil {