3 Commits

Author	SHA1	Message	Date
Daniel Bedeleanu	483a747600	fix: CORS configuration for both docker-compose and start_server.sh deployments ... - Update start_server.sh to auto-detect local IP and export ALLOWED_ORIGINS - Includes both localhost and detected IP on HTTP/HTTPS proxy ports - Export JWT_SECRET_KEY with ephemeral key if not set - Fix Romanian comments in docker-compose.yml to English - Document two deployment methods in SESSION_STATE.md	2026-04-11 14:44:00 +03:00
Daniel Bedeleanu	e6ca33f2f0	feat: frontend JWT handling, rate limiting [H-02], CORS config ... Frontend: - Creiez frontend/lib/auth.ts cu saveToken, getToken, getAuthHeader, clearAuth - Modific api.ts: axiosInstance cu interceptor Bearer token + 401 → /login redirect - Modific login page: salveaza JWT token din response Backend: - [H-02] Integrez slowapi rate limiting: 10 req/minute pe /items/extract-label - [M-01] CORS: ALLOWED_ORIGINS din env (dev fallback: localhost:3000, localhost:3002) - [C-01] JWT_SECRET_KEY din env (dev fallback: ephemeral key) docker-compose.yml: - Adaug ALLOWED_ORIGINS env var (dev: localhost) - Adaug JWT_SECRET_KEY env var cu fallback warning Status: - ✅ JWT backend: complet - ✅ JWT frontend: token save + attach + 401 handling - ✅ Rate limiting: 10/min pe extract-label - ✅ CORS: configurable via env Gata pentru dev + testing local. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-04-11 13:42:09 +03:00
Daniel Bedeleanu	2e5ce8d153	feat: complete dockerization architecture with data/logs persistence and prod export script v1.3.0	2026-04-11 12:33:13 +03:00