fix: scope LLM queue list to authenticated user (#508)#529

Merged

Chris0Jeky merged 11 commits intomainfrom

fix/508-queue-user-isolation

Mar 29, 2026

Commits on Mar 29, 2026

Add GetByUserAndStatusAsync to ILlmQueueRepository for user-scoped status queries
Chris0Jeky
committed
Implement GetByUserAndStatusAsync in LlmQueueRepository with UserId predicate
Chris0Jeky
committed
Scope GetQueueByStatusAsync and GetQueueStatsAsync to userId in ILlmQueueService
Chris0Jeky
committed
Filter GetQueueByStatusAsync and GetQueueStatsAsync by userId in LlmQueueService
Chris0Jeky
committed
Extract userId from claims in GetByStatus and GetQueueStats to prevent cross-user data leak (#508)
Chris0Jeky
committed
Update LlmQueueServiceTests to use new GetByUserAndStatusAsync mock signatures
Chris0Jeky
committed
Add cross-user isolation tests for GetByStatus and GetQueueStats endpoints
Chris0Jeky
committed
Add GetStatusCountsByUserAsync to ILlmQueueRepository
Chris0Jeky
committed
Implement GetStatusCountsByUserAsync and add AsNoTracking to LlmQueueRepository
Chris0Jeky
committed
Replace 4 DB calls in GetQueueStatsAsync with single GROUP BY query
Chris0Jeky
committed
Update LlmQueueServiceTests to mock GetStatusCountsByUserAsync
Chris0Jeky
committed