4 commits

Author	SHA1	Message	Date
senke	a6952a3dd5	[BE-API-013] be-api: Implement track comments endpoints ... - Added GET /tracks/:id/comments route (public) - Added POST /tracks/:id/comments route (protected) - Added DELETE /comments/:id route (protected) - Initialized CommentService and CommentHandler in setupTrackRoutes - Standardized API responses in comment handlers - Handlers use RespondSuccess and RespondWithAppError Phase: PHASE-2 Priority: P1 Progress: 22/267 (8.2%)	2025-12-24 11:19:05 +01:00
senke	68a2bdb541	[BE-SEC-001] security: Fix ownership verification for user profile updates ... - Verified RequireOwnershipOrAdmin middleware is correctly applied to PUT /users/:id - Added integration tests for ownership verification - Test: user cannot update another user's profile (403 Forbidden) - Test: admin can update any profile (200 OK) - Test: user can update own profile (200 OK) - All tests pass Phase: PHASE-1 Priority: P0 Progress: 1/267 (0.4%)	2025-12-23 01:36:04 +01:00
senke	34f3468c89	fix(MVP-006): Standardize environment variable names (VITE_API_BASE_URL → VITE_API_URL)	2025-12-22 22:56:37 +01:00
senke	1470f6030f	batch 1	2025-12-22 22:00:50 +01:00