These directories were already tracked before being added to .gitignore.
Removed 3350 cached files from git index via 'git rm --cached -r'.
Files remain on disk but are no longer tracked by git.
- Log when saveToken is called with token details
- Log when request interceptor checks for token
- Log when Authorization header is set or token is missing
- Helps diagnose 401 Unauthorized issues after login
- Resolves sqlite3.OperationalError when database path is relative
- Uses script directory as base for all relative paths
- Ensures consistent behavior regardless of working directory
- Move ldap_config.json from ./data/ to backend/config/
- Update users.py to read LDAP config from backend/config/ldap_config.json
- Create frontend/config/ directory for future frontend configs
- DATA_DIR still used for database and runtime files in ./data/
- Update .gitignore to track backend/config/ but ignore runtime data dirs
- DATA_DIR=./data points backend to correct config location
- Ensures ldap_config.json and database are found consistently
- Matches docker-compose setup
- Update start_server.sh to auto-detect local IP and export ALLOWED_ORIGINS
- Includes both localhost and detected IP on HTTP/HTTPS proxy ports
- Export JWT_SECRET_KEY with ephemeral key if not set
- Fix Romanian comments in docker-compose.yml to English
- Document two deployment methods in SESSION_STATE.md
USER_GUIDE.md is a production file → must be ENGLISH ONLY.
Complete translation covering:
- PWA mobile installation
- Authentication (JWT tokens, LDAP, 8h token expiry)
- Scanning modes (barcode, AI OCR)
- Inventory organization
- Offline operation & auto-sync
- Activity/audit log
- Admin functions (users, LDAP, settings)
- Security notices
- Troubleshooting guide
- Version info
Follows mandatory rule: All production documentation in English ONLY.
(Only AI-user discussion can be in Romanian)
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Session state fully in English (following STRICT ENGLISH POLICY for production docs).
Added comprehensive Production Deployment section to README with:
- Environment variables table (JWT_SECRET_KEY, ALLOWED_ORIGINS)
- Critical deployment checklist
- Docker production setup example
- Reference to SECURITY_REPORT.md
Addresses:
1. Documentation in English for production files ✓
2. Details on JWT_SECRET_KEY and ALLOWED_ORIGINS for production users ✓
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Audit de securitate: 12 vulnerabilități identificate, 12/12 remediate
JWT backend: complet cu auth pe toți routers
JWT frontend: token handling + 401 redirect
Rate limiting: 10/min pe /items/extract-label
CORS: ALLOWED_ORIGINS configurable via env
Docker: environment vars pentru dev+prod
Status: PRODUCTION-READY (cu caveate env setup)
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Backend-ul are autentificație JWT completa pe toți routers-ii.
Frontend-ul trebuie actualizat pentru a trimite token în header.
Rate limiting (H-02) și CORS final rămân pending.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
