Build [v1.8.0]

backend/.env.example

@@ -1,25 +0,0 @@
-# ============================================================
-# TFM aInventory — Backend Environment Variables
-# Copy this file to .env and fill in real values.
-# NEVER commit the real .env file to Git!
-# ============================================================
-
-# --- AI API Keys ---
-# Google Gemini API Key (required for AI label OCR onboarding)
-GEMINI_API_KEY=your_gemini_api_key_here
-
-# --- Security ---
-# JWT secret key — generate a strong random value for production:
-#   python3 -c "import secrets; print(secrets.token_urlsafe(64))"
-# If not set, an ephemeral key is generated per-run (tokens invalidated on restart).
-JWT_SECRET_KEY=change-me-generate-a-secure-random-value
-
-# --- CORS ---
-# Comma-separated list of allowed frontend origins
-# Example for LAN deployment:
-#   ALLOWED_ORIGINS=http://192.168.1.100:3000,https://192.168.1.100:3003
-ALLOWED_ORIGINS=http://localhost:3000,https://localhost:3003
-
-# --- Data Paths (overridden by start_server.sh / docker-compose) ---
-# DATA_DIR=/absolute/path/to/data
-# LOGS_DIR=/absolute/path/to/logs

backend/config/ldap_config.json.example

@@ -1,20 +0,0 @@
-{
-  "_comment": "Copy this file to ldap_config.json and fill in real values. NEVER commit ldap_config.json to Git.",
-  "ldap_enabled": false,
-  "server_uri": "ldap://YOUR_LDAP_SERVER_IP:389",
-  "base_dn": "dc=yourdomain,dc=com",
-  "user_template": "cn={username},ou=people,dc=yourdomain,dc=com",
-  "groups_dn": "ou=groups",
-  "use_tls": false,
-  "ignore_cert": false,
-  "role_mappings": [
-    {
-      "group": "inventory_admins",
-      "role": "admin"
-    },
-    {
-      "group": "inventory_users",
-      "role": "user"
-    }
-  ]
-}

backend/main.py

@@ -24,7 +24,7 @@ log.info("TFM aInventory API process started.")
 # Secure fallback: localhost only for development.
 _raw_origins = os.environ.get(
     "ALLOWED_ORIGINS",
-    "http://localhost:3000,http://localhost:3002"
+    "http://localhost:8907,https://localhost:8909"
 )
 ALLOWED_ORIGINS = [o.strip() for o in _raw_origins.split(",") if o.strip()]
 log.info(f"CORS allowed origins: {ALLOWED_ORIGINS}")

backend/routers/users.py

@@ -20,8 +20,9 @@ limiter = Limiter(key_func=get_remote_address)
 pwd_context = CryptContext(schemes=["pbkdf2_sha256"], deprecated="auto")
 
 def get_ldap_config():
-    # Read from backend/config/ directory
-    config_dir = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), "config")
+    # Read from root /config directory
+    root_dir = os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+    config_dir = os.path.join(root_dir, "config")
     config_path = os.path.join(config_dir, "ldap_config.json")
     if os.path.exists(config_path):
         with open(config_path, "r") as f:
@@ -314,7 +315,8 @@ def update_ldap_settings(
     current_user: auth.TokenData = Depends(auth.get_current_admin)
 ):
     """[C-01] Update LDAP config — admin only."""
-    config_dir = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), "config")
+    root_dir = os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+    config_dir = os.path.join(root_dir, "config")
     os.makedirs(config_dir, exist_ok=True)
     config_path = os.path.join(config_dir, "ldap_config.json")
     with open(config_path, "w") as f: