Daniel Bedeleanu
|
247ea45408
|
security: audit complet + patch vulnerabilitati critice v1.3.5
Audit de securitate executat pe Backend (FastAPI) si Frontend (Next.js/Dexie).
12 vulnerabilitati identificate (4 CRITICE, 4 HIGH, 3 MEDIUM, 1 LOW).
Patch-uri aplicate direct:
- [C-02] Eliminat bypass autentificare pentru useri fara parola (users.py)
- [C-03] Parola default Admin inlocuita cu secrets.token_urlsafe(16) (users.py)
- [H-01] LDAP injection fix: escape_filter_chars pe username (users.py)
- [H-03] Validare MIME + limita 10MB pe /items/extract-label (items.py)
- [M-01] CORS fix: allow_origins din env ALLOWED_ORIGINS, nu wildcard (main.py)
- [M-03] Toate print() LDAP inlocuite cu log.debug() (users.py)
Raport complet: dev_docs/SECURITY_REPORT.md
Actiuni arhitecturale ramase (JWT enforcement, rate limiting): SESSION_STATE.md
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-11 13:20:05 +03:00 |
|
Daniel Bedeleanu
|
cb9df1d73f
|
chore: ignore log files and directories
|
2026-04-11 12:54:43 +03:00 |
|
Daniel Bedeleanu
|
fe18fe01c6
|
docs: add mandatory documentation maintenance rule for AI agents v1.3.5
|
2026-04-11 12:51:14 +03:00 |
|
Daniel Bedeleanu
|
91bdd791d2
|
docs: add Romanian User Guide and include in prod export v1.3.4
|
2026-04-11 12:49:11 +03:00 |
|
Daniel Bedeleanu
|
ed06f0b56e
|
docs: add comprehensive project README.md v1.3.3
|
2026-04-11 12:47:23 +03:00 |
|
Daniel Bedeleanu
|
df9468344d
|
feat: pivot systemd to standalone bare-metal mode v1.3.2
|
2026-04-11 12:43:53 +03:00 |
|
Daniel Bedeleanu
|
d87067e88c
|
feat: add systemd service template and installer for production 1.3.1
|
2026-04-11 12:39:38 +03:00 |
|
Daniel Bedeleanu
|
2e5ce8d153
|
feat: complete dockerization architecture with data/logs persistence and prod export script v1.3.0
|
2026-04-11 12:33:13 +03:00 |
|
Daniel Bedeleanu
|
a4cea4ce07
|
feat: offline ldap support and ui polish v1.2.4
|
2026-04-11 11:41:39 +03:00 |
|
Daniel Bedeleanu
|
4136d49936
|
style: ui readability refactor v1.2.2 (removed uppercase, tracking, increased font sizes)
|
2026-04-11 11:22:40 +03:00 |
|
Daniel Bedeleanu
|
8a3783c7e9
|
Infrastructure: Implement master/dev/vX branching, save git path, and fix username casing
|
2026-04-10 21:51:22 +03:00 |
|
Daniel Bedeleanu
|
373652e8b8
|
feat: AI coordination protocol and advanced audit operations
|
2026-04-10 13:57:42 +03:00 |
|
Daniel Bedeleanu
|
e4b0afb50d
|
feat: core inventory API and secure operation routers
|
2026-04-10 13:47:10 +03:00 |
|
Daniel Bedeleanu
|
46bd6ae733
|
feat: backend foundation setup with SQLite and FastAPI
|
2026-04-10 13:44:21 +03:00 |
|