Daniel Bedeleanu
e9ada00497
docs: update SESSION_STATE cu status [C-01] JWT auth COMPLET
...
Backend-ul are autentificație JWT completa pe toți routers-ii.
Frontend-ul trebuie actualizat pentru a trimite token în header.
Rate limiting (H-02) și CORS final rămân pending.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-04-11 13:38:45 +03:00
Daniel Bedeleanu
247ea45408
security: audit complet + patch vulnerabilitati critice v1.3.5
...
Audit de securitate executat pe Backend (FastAPI) si Frontend (Next.js/Dexie).
12 vulnerabilitati identificate (4 CRITICE, 4 HIGH, 3 MEDIUM, 1 LOW).
Patch-uri aplicate direct:
- [C-02] Eliminat bypass autentificare pentru useri fara parola (users.py)
- [C-03] Parola default Admin inlocuita cu secrets.token_urlsafe(16) (users.py)
- [H-01] LDAP injection fix: escape_filter_chars pe username (users.py)
- [H-03] Validare MIME + limita 10MB pe /items/extract-label (items.py)
- [M-01] CORS fix: allow_origins din env ALLOWED_ORIGINS, nu wildcard (main.py)
- [M-03] Toate print() LDAP inlocuite cu log.debug() (users.py)
Raport complet: dev_docs/SECURITY_REPORT.md
Actiuni arhitecturale ramase (JWT enforcement, rate limiting): SESSION_STATE.md
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-04-11 13:20:05 +03:00
Daniel Bedeleanu
903c65a4b4
docs: archive gemini session and hand over to claude for security audit
2026-04-11 13:03:19 +03:00
Daniel Bedeleanu
2e5ce8d153
feat: complete dockerization architecture with data/logs persistence and prod export script v1.3.0
2026-04-11 12:33:13 +03:00
Daniel Bedeleanu
432cd28ca5
docs: refactor documentation for portability and SSOT v1.2.7
2026-04-11 11:57:13 +03:00
Daniel Bedeleanu
4136d49936
style: ui readability refactor v1.2.2 (removed uppercase, tracking, increased font sizes)
2026-04-11 11:22:40 +03:00
Daniel Bedeleanu
99b70a9de8
Docs: Finalize session logs and handover for v1.2.1
2026-04-10 22:00:05 +03:00
Daniel Bedeleanu
8a3783c7e9
Infrastructure: Implement master/dev/vX branching, save git path, and fix username casing
2026-04-10 21:51:22 +03:00
Daniel Bedeleanu
f0c22d1732
feat: frontend PWA scaffolding with React and Tailwind
2026-04-10 14:06:27 +03:00
Daniel Bedeleanu
373652e8b8
feat: AI coordination protocol and advanced audit operations
2026-04-10 13:57:42 +03:00
