Daniel Bedeleanu
e9ada00497
docs: update SESSION_STATE cu status [C-01] JWT auth COMPLET
...
Backend-ul are autentificație JWT completa pe toți routers-ii.
Frontend-ul trebuie actualizat pentru a trimite token în header.
Rate limiting (H-02) și CORS final rămân pending.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-04-11 13:38:45 +03:00
Daniel Bedeleanu
247ea45408
security: audit complet + patch vulnerabilitati critice v1.3.5
...
Audit de securitate executat pe Backend (FastAPI) si Frontend (Next.js/Dexie).
12 vulnerabilitati identificate (4 CRITICE, 4 HIGH, 3 MEDIUM, 1 LOW).
Patch-uri aplicate direct:
- [C-02] Eliminat bypass autentificare pentru useri fara parola (users.py)
- [C-03] Parola default Admin inlocuita cu secrets.token_urlsafe(16) (users.py)
- [H-01] LDAP injection fix: escape_filter_chars pe username (users.py)
- [H-03] Validare MIME + limita 10MB pe /items/extract-label (items.py)
- [M-01] CORS fix: allow_origins din env ALLOWED_ORIGINS, nu wildcard (main.py)
- [M-03] Toate print() LDAP inlocuite cu log.debug() (users.py)
Raport complet: dev_docs/SECURITY_REPORT.md
Actiuni arhitecturale ramase (JWT enforcement, rate limiting): SESSION_STATE.md
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-04-11 13:20:05 +03:00
Daniel Bedeleanu
903c65a4b4
docs: archive gemini session and hand over to claude for security audit
2026-04-11 13:03:19 +03:00
Daniel Bedeleanu
2e5ce8d153
feat: complete dockerization architecture with data/logs persistence and prod export script v1.3.0
2026-04-11 12:33:13 +03:00
Daniel Bedeleanu
c71a815792
docs: restore automatic IDE entry points as proxies v1.2.9
2026-04-11 12:11:23 +03:00
Daniel Bedeleanu
0a9ea0f575
docs: consolidate all rules and specs into absolute sources of truth v1.2.8
2026-04-11 12:03:27 +03:00
Daniel Bedeleanu
432cd28ca5
docs: refactor documentation for portability and SSOT v1.2.7
2026-04-11 11:57:13 +03:00
Daniel Bedeleanu
96fe655f72
fix: add missing icon imports v1.2.6
2026-04-11 11:49:31 +03:00
Daniel Bedeleanu
aa134e4384
style: synchronize icons for categories and items v1.2.5
2026-04-11 11:46:34 +03:00
Daniel Bedeleanu
a4cea4ce07
feat: offline ldap support and ui polish v1.2.4
2026-04-11 11:41:39 +03:00
Daniel Bedeleanu
d7dcd523a6
style: full system ui homogenization v1.2.3
2026-04-11 11:25:09 +03:00
Daniel Bedeleanu
4136d49936
style: ui readability refactor v1.2.2 (removed uppercase, tracking, increased font sizes)
2026-04-11 11:22:40 +03:00
Daniel Bedeleanu
99b70a9de8
Docs: Finalize session logs and handover for v1.2.1
2026-04-10 22:00:05 +03:00
Daniel Bedeleanu
8a3783c7e9
Infrastructure: Implement master/dev/vX branching, save git path, and fix username casing
2026-04-10 21:51:22 +03:00
Daniel Bedeleanu
f0c22d1732
feat: frontend PWA scaffolding with React and Tailwind
2026-04-10 14:06:27 +03:00
Daniel Bedeleanu
7f8b24aabb
feat: frontend PWA scaffolding with React and Tailwind
2026-04-10 14:05:50 +03:00
Daniel Bedeleanu
373652e8b8
feat: AI coordination protocol and advanced audit operations
2026-04-10 13:57:42 +03:00
Daniel Bedeleanu
e4b0afb50d
feat: core inventory API and secure operation routers
2026-04-10 13:47:10 +03:00
Daniel Bedeleanu
748bbc301a
chore: initial project scaffolding with AI rules and requirements
2026-04-10 13:35:03 +03:00
