Refac/domain driven #1

2026-09-25T16:14:57+02:00

fsylvain commented

2026-09-25 16:14:57 +02:00

No description provided.

fsylvain added 40 commits 2026-09-25 16:14:57 +02:00

refac: remove frontend & clearer DDD 61a84201d8

fix: removed useless file 0eba18e367

fix: removed domain article coupling with infra e0a6706d4e

refac: mappers, file names b50efae8a8

refac: better error handling & moved IsOnline logic to cleaner place 5282770caa

fix: added some business rules to article creation 76245c47c9

fix: remove low file code from domain ce787d26ff

feat: unit testing mocked repos / domain 9c80cb9885

fix: allowed register condition fbbce403e2

feat: initial vuejs frontend commit 9ecaa80fcf

feat: primevue base aee595dee9

feat: api serve frontend, build workflow, router readyness 4a6209a8db

refac: rethought the complete workflow and deployement flow ; docs etc. 09bd5afa4a

feat: characterized the existing use cases as a baseline; every repo fake behaves like the real ones and can be told to fail, every use case is covered; gremlins runs clean on useCases 7c57173497

refac: missing user or article is reported with a domain not-found error instead of a raw GORM error, and the API answers 404 for it 8460a078e3

refac: password and code hashing & checking go through a domain hasher interface used by the use cases instead of bcrypt in the user repository and the auth handler ff8cd5f0ec

refac: article title rules are the same in the API request and the domain; an invalid title returns 400 instead of 500 4278d96882

refac: repository updates, image attachment and deletes report the domain not-found error for an unknown id, the same for articles, users and images, and the test fakes stop returning GORM errors 6a2ca07b66

refac: authenticated user can list all articles, including offline ones, while the public list only shows online ones 790d4e6da6

refac: authenticated user can publish and unpublish an article; an unknown id returns 404 8822bdddd0

refac: authenticated user can edit an article's body; an unknown id returns 404 c16fdbd26d

refac: deleting an article also deletes its images, and deleting a missing article returns 404 8a8a24434a

refac: allowed image types and the size limit are a domain rule checked by the use case, not by the persistence layer 5992c8598b

refac: authenticated user can upload an image to an existing article and receives its public location; an unknown article returns 404 and a disallowed type returns 400 e474f03d91

refac: runtime settings are read once at startup and passed in through the composition root; no handler, router or repository reads environment variables 0b4e614ec9

refac: several unverified users can exist at once: an empty reset or verification code is stored as no value so it doesn't break the unique constraint, and deleting a user removes the row so the same username and email can register again 6e9e108033

refac: register only open while no verified acc exists, enforced by a use case rather than handler & sends verification email whose link uses the conf pub URL whose code expires after 2h 6d510d2805

refac: reamaining auth surface rewrite, T0 aa865af2e9

fix: API responses never include a user's password, verification code or reset code hashes, or their expiry dates; verifying an account returns only the public user fields 2ee28203ab

fix: reading a single article follows the same rule as the list: anyone can read an online article, a verified user can also read an offline one, and an unknown or hidden id returns 404 81c4b62175

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused f3ec3d2fa2

fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes) cbb403011a

fix: remove the unused user use cases, fix the specs that no longer match the code, include api/middleware and api/pkg/claims in mutation testing, log failures that password reset requests currently ignore, and reject user_id claims that don't fit a user id 3282b0580c

refac: split the auth handler into registration and login, account verification, and password reset handlers, each with its own dependencies 9b47685002

fix: rate limiting X-Real-IP from the real peer 0e050c36ff

refac: GET /v1/auth/me 8d17a12e92

refac: GET /static/uploadedImages/{filename} 61828783a1

refac: GET /v1/auth/registration 2a64991916

chore: setup design references 64f50074bd

chore: Vitest + Vue Test Utils test runner exposed as task test:web 24f95a8fd7

fsylvain merged commit 24f95a8fd7 into main

2026-09-25 16:15:15 +02:00

fsylvain deleted branch refac/domain-driven

2026-09-25 16:15:15 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: fsylvain/RenewCMS#1