Files
pictureFrame-webApp/tests/Functional
football2801 6b13312fdd
CI / test (push) Has been cancelled
feat(devices): X-Just-Provisioned gate so reset devices can't leak prior owner's photos
Pairs with the firmware change of the same scope. Server-side contract:

  - X-Just-Provisioned: 1 + binding older than 5 min → 204 (the device
    paints its setup QR) regardless of any approved images on the
    seller's account. No image content leaks.
  - X-Just-Provisioned: 1 + binding fresher than 5 min → normal
    response (200/304/204), with X-Claimed: 1 stamped so the firmware
    clears its NVS flag and returns to standard operation.
  - No header → no special behavior. Long-stable devices unaffected.

This is what makes the BOOT-5s reset actually safe to use as the
"factory reset" gesture: now it forces a real re-claim cycle, instead
of silently inheriting the prior owner's content because the MAC is
still bound on the server.

3 functional tests: stale-binding 204, fresh-binding 200 + X-Claimed,
and absence-of-header preserves legacy behavior.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-08 16:05:32 -04:00
..