bede/tfm_ainventory
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore: translate remaining Romanian code comments to English (STRICT ENGLISH POLICY)

Browse Source
This commit is contained in:
Daniel Bedeleanu
2026-04-11 14:25:03 +03:00
parent f0de7d763a
commit c31209b740
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/main.py
View File

@@ -15,12 +15,12 @@ log.info("Database tables verified.")
app = FastAPI(title="TFM aInventory API", version="1.1.0") app = FastAPI(title="TFM aInventory API", version="1.1.0")
log.info("TFM aInventory API process started.") log.info("TFM aInventory API process started.")
# [H-02] Rate limiting pe API # [H-02] Rate limiting on API
limiter = Limiter(key_func=get_remote_address) limiter = Limiter(key_func=get_remote_address)
app.state.limiter = limiter app.state.limiter = limiter
app.add_exception_handler = limiter.add_exception_handler app.add_exception_handler = limiter.add_exception_handler
# [SECURITY FIX M-01] CORS: allow_origins=["*"] + allow_credentials=True este invalid per spec. # [SECURITY FIX M-01] CORS: allow_origins=["*"] + allow_credentials=True is invalid per spec.
# Originile permise se configurează via variabila de mediu ALLOWED_ORIGINS (comma-separated). # Originile permise se configurează via variabila de mediu ALLOWED_ORIGINS (comma-separated).
# Fallback sigur: doar localhost pentru development. # Fallback sigur: doar localhost pentru development.
_raw_origins = os.environ.get( _raw_origins = os.environ.get(

8
backend/routers/users.py
View File

@@ -114,11 +114,11 @@ def get_users(
db: Session = Depends(get_db), db: Session = Depends(get_db),
current_user: auth.TokenData = Depends(auth.get_current_user) current_user: auth.TokenData = Depends(auth.get_current_user)
): ):
"""[C-01] Lista utilizatori — doar pentru useri autentificati.""" """[C-01] User list — only for authenticated users."""
users = db.query(models.User).all() users = db.query(models.User).all()
# Auto-seed if empty # Auto-seed if empty
if not users: if not users:
# [SECURITY FIX C-03] Generare parolă aleatoare în loc de "admin" hardcodat # [SECURITY FIX C-03] Generate random password instead of hardcoded "admin"
initial_password = secrets.token_urlsafe(16) initial_password = secrets.token_urlsafe(16)
new_user = models.User( new_user = models.User(
username="Admin", username="Admin",
@@ -164,8 +164,8 @@ def login(form_data: schemas.UserLogin, db: Session = Depends(get_db)):
if verify_password(form_data.password, user.hashed_password): if verify_password(form_data.password, user.hashed_password):
authenticated = True authenticated = True
elif user and not user.hashed_password: elif user and not user.hashed_password:
# [SECURITY FIX C-02] Bypass-ul pentru utilizatori fără parolă a fost eliminat. # [SECURITY FIX C-02] Bypass for passwordless users has been removed.
# Utilizatorii LDAP trebuie să se autentifice prin fluxul LDAP de mai jos. # LDAP users must authenticate via the LDAP flow below.
pass pass
# If local failed, try LDAP # If local failed, try LDAP