 Florian Sylvain
|
5d6f378fce
|
refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths
|
2026-10-28 17:54:10 +01:00 |
|
|
Florian Sylvain
|
34dffe222f
|
feat: roles SPA Users, Profile, API keys, Activity
|
2026-10-28 00:10:15 +01:00 |
|
|
Florian Sylvain
|
80f7037d3a
|
feat: Users API, ownership transfer and removal of the legacy role string
|
2026-10-27 03:08:15 +01:00 |
|
|
Florian Sylvain
|
8c6c6456da
|
feat: roles system backend
|
2026-10-26 05:02:49 +01:00 |
|
|
Florian Sylvain
|
ea98c5ec05
|
fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)
|
2026-10-22 00:49:19 +02:00 |
|
|
Florian Sylvain
|
c68e9a7858
|
refac: removed 7 direct and 12 indirect go modules for custom code instead
|
2026-10-21 23:13:46 +02:00 |
|
|
Florian Sylvain
|
b34a173d83
|
feat: Authors feature backend (and upgraded deprecated mods)
|
2026-10-14 17:45:00 +02:00 |
|
 fsylvain
|
e37a46a027
|
feat: activity log producers
|
2026-10-06 22:25:23 +02:00 |
|
|
fsylvain
|
50b1649965
|
feat: activity log backend foundation
|
2026-10-06 20:35:03 +02:00 |
|
|
fsylvain
|
55525c06d6
|
feat: invitation accept screen and api
|
2026-09-29 09:21:53 +02:00 |
|
|
fsylvain
|
7aae704d0a
|
feat(API): optional display name on users
|
2026-09-29 06:52:58 +02:00 |
|
|
fsylvain
|
2a64991916
|
refac: GET /v1/auth/registration
|
2026-09-25 15:54:42 +02:00 |
|
|
fsylvain
|
8d17a12e92
|
refac: GET /v1/auth/me
|
2026-09-25 15:17:39 +02:00 |
|
|
fsylvain
|
9b47685002
|
refac: split the auth handler into registration and login, account verification, and password reset handlers, each with its own dependencies
|
2026-09-25 06:14:53 +02:00 |
|
|
fsylvain
|
f3ec3d2fa2
|
fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused
|
2026-09-25 05:03:34 +02:00 |
|
|
fsylvain
|
2ee28203ab
|
fix: API responses never include a user's password, verification code or reset code hashes, or their expiry dates; verifying an account returns only the public user fields
|
2026-09-24 15:39:50 +02:00 |
|
|
fsylvain
|
aa865af2e9
|
refac: reamaining auth surface rewrite, T0
|
2026-09-24 05:11:49 +02:00 |
|
|
fsylvain
|
6d510d2805
|
refac: register only open while no verified acc exists, enforced by a use case rather than handler & sends verification email whose link uses the conf pub URL whose code expires after 2h
|
2026-09-24 03:36:37 +02:00 |
|
|
fsylvain
|
0b4e614ec9
|
refac: runtime settings are read once at startup and passed in through the composition root; no handler, router or repository reads environment variables
|
2026-09-24 01:30:00 +02:00 |
|
|
fsylvain
|
ff8cd5f0ec
|
refac: password and code hashing & checking go through a domain hasher interface used by the use cases instead of bcrypt in the user repository and the auth handler
|
2026-09-23 19:29:20 +02:00 |
|
|
Floriansylvain
|
4a6209a8db
|
feat: api serve frontend, build workflow, router readyness
|
2025-12-24 01:05:58 +01:00 |
|
|
Floriansylvain
|
fbbce403e2
|
fix: allowed register condition
|
2025-12-22 03:07:30 +01:00 |
|
|
Floriansylvain
|
b50efae8a8
|
refac: mappers, file names
|
2025-12-22 00:06:17 +01:00 |
|
|
Floriansylvain
|
61a84201d8
|
refac: remove frontend & clearer DDD
|
2025-12-21 21:31:30 +01:00 |
|