senke
6823e5a30d
release(v0.902): Sentinel - PKCE OAuth, token encryption, redirect validation, CHAT_JWT_SECRET
...
Backend API CI / test-unit (push) Failing after 0s
Backend API CI / test-integration (push) Failing after 0s
- PKCE (S256) in OAuth flow: code_verifier in oauth_states, code_challenge in auth URL
- CryptoService: AES-256-GCM encryption for OAuth provider tokens at rest
- OAuth redirect URL validated against OAUTH_ALLOWED_REDIRECT_DOMAINS
- CHAT_JWT_SECRET must differ from JWT_SECRET in production
- Migration script: cmd/tools/encrypt_oauth_tokens for existing tokens
- Fixes: VEZA-SEC-003, VEZA-SEC-004, VEZA-SEC-009, VEZA-SEC-010
2026-02-26 19:49:15 +01:00
senke
51984e9a1f
feat(security): v0.901 Ironclad - fix 5 critical/high vulnerabilities
...
Backend API CI / test-unit (push) Failing after 0s
Backend API CI / test-integration (push) Failing after 0s
- OAuth: use JWTService+SessionService, httpOnly cookies (VEZA-SEC-001)
- Remove PasswordService.GenerateJWT (VEZA-SEC-002)
- Hyperswitch webhook: mandatory verification, 500 if secret empty (VEZA-SEC-005)
- Auth middleware: TokenBlacklist.IsBlacklisted check (VEZA-SEC-006)
- Waveform: ValidateExecPath before exec (VEZA-SEC-007)
2026-02-26 19:34:45 +01:00
senke
5063c95a5c
docs: update documentation for v0.803 release
2026-02-25 20:04:37 +01:00
senke
62e3e96884
test(v0.803): unit tests for CCPA, reports, announcements, feature flags
2026-02-25 20:02:24 +01:00
senke
0fc3690c18
feat(ui): connect admin views to real backend, add AnnouncementBanner, MSW handlers
2026-02-25 20:00:43 +01:00
senke
c782bcb5b3
feat(admin): feature flags CRUD with DB persistence
2026-02-25 19:56:24 +01:00
senke
99b7cd8d97
feat(admin): global announcements CRUD and public banner endpoint
2026-02-25 19:55:21 +01:00
senke
f30a9562a9
feat(admin): maintenance mode middleware with 503 responses
2026-02-25 19:54:22 +01:00
senke
911fc525a2
feat(admin): moderation queue with reports CRUD
2026-02-25 19:53:04 +01:00
senke
d35b7d37fb
feat(api): add Swagger annotations for privacy opt-out and account deletion
2026-02-25 19:51:54 +01:00
senke
9636613eaa
feat(users): account deletion hardening with anonymization, S3 cleanup, session revocation
2026-02-25 19:51:21 +01:00
senke
3f56e49791
feat(compliance): CCPA Do Not Sell middleware and opt-out endpoint
2026-02-25 19:49:25 +01:00
senke
470162ade8
feat(audit): HTTP audit middleware for auto-logging POST/PUT/DELETE
2026-02-25 19:48:03 +01:00
senke
7692c4b8b9
feat(v0.802): frontend Cloud/Gear, MSW, docs, scope v0.803, archive
...
- Cloud: CloudFileVersions, CloudShareModal, versions/share in CloudView
- Gear: GearDocumentsTab, GearRepairsTab, warranty badge, initialTab
- MSW: cloud versions/share, gear documents/repairs, tags suggest
- Stories: CloudFileVersions, CloudShareModal, GearDetailModal variants
- gearService: listDocuments, uploadDocument, deleteDocument, listRepairs, createRepair, deleteRepair
- cloudService: listVersions, restoreVersion, shareFile, getSharedFile
- gear_warranty_notifier: 24h ticker, notifications for expiring warranty
- tag_handler_test: unit tests
- docs: API_REFERENCE, CHANGELOG, PROJECT_STATE, FEATURE_STATUS v0.802
- SCOPE_CONTROL, .cursorrules: scope v0.803
- archive: V0_802_RELEASE_SCOPE, RETROSPECTIVE_V0802
2026-02-25 14:00:58 +01:00
senke
596233aaaf
feat(upload): tags auto-suggest endpoint and additional audio formats
2026-02-25 13:39:59 +01:00
senke
122eff5c0f
feat(upload): batch upload with parallel queue, BatchUploader component
2026-02-25 13:37:52 +01:00
senke
8162d1b419
feat(cloud): GDPR data export and automatic backup cron
2026-02-25 13:35:16 +01:00
senke
dced768c01
feat(cloud): file versioning, restore, and sharing
2026-02-25 13:33:08 +01:00
senke
689d9164f6
feat(db): add migrations 119-122 for cloud versions, gear warranty/documents/repairs
2026-02-25 13:30:49 +01:00
senke
9bef4db8a6
chore(docs): archive V0_801_RELEASE_SCOPE, retrospective, scope v0.802
2026-02-25 10:00:39 +01:00
senke
7c73af9b7f
docs: update CHANGELOG, PROJECT_STATE, FEATURE_STATUS for v0.801
2026-02-25 10:00:24 +01:00
senke
d9bb9a0c1e
feat(player): add WakeLock for background playback on mobile
2026-02-25 09:57:37 +01:00
senke
ec937f8956
feat(pwa): re-enable service worker with safe caching, add Install App in Settings
2026-02-25 09:56:26 +01:00
senke
d1ae4a2768
feat(a11y): ARIA labels, aria-haspopup menu, icon button labels
2026-02-25 09:55:30 +01:00
senke
9b33f3283d
feat(settings): wire appearance controls to ThemeProvider and backend
2026-02-25 09:54:45 +01:00
senke
50482a01fd
feat(theme): extend ThemeProvider with contrast, density, accent, fontSize
2026-02-25 09:52:32 +01:00
senke
e32ff181f5
feat(ui): add high contrast, compact density, font-size CSS tokens
2026-02-25 09:47:02 +01:00
senke
d161a3739d
feat(users): add user_preferences migration with appearance fields
2026-02-25 09:45:03 +01:00
senke
63867f1d09
feat(v0.703): Go Live & Streaming Complet
...
Backend API CI / test-unit (push) Failing after 0s
Backend API CI / test-integration (push) Failing after 0s
Frontend CI / test (push) Failing after 0s
Storybook Audit / Build & audit Storybook (push) Failing after 0s
- Backend: room creation for live streams, permissions CanJoin/CanSend/CanRead for stream rooms
- LiveViewChat: useLiveStreamChat hook, WebSocket connection, stream_id as room
- LiveViewPlayer: real-time viewer count via polling (5s)
- Media Session: seekbackward/seekforward handlers (10s step)
- GoLiveView.stories.tsx: Default, Loading, Error, StreamKeyVisible
- Docs: API_REFERENCE, CHANGELOG, PROJECT_STATE, FEATURE_STATUS, RETROSPECTIVE_V0703
- SCOPE_CONTROL, .cursorrules: update to v0.801
- Archive V0_703_RELEASE_SCOPE.md
2026-02-25 09:35:22 +01:00
senke
bd63ac6832
feat(live): add GoLivePage, GoLiveView, liveService methods, lazy export, route, Navbar/Sidebar wiring
2026-02-24 10:00:43 +01:00
senke
038f6d4991
test(live): add live stream service unit tests
...
Use serializer:json for LiveStream.Tags to support SQLite in-memory tests.
2026-02-24 09:56:08 +01:00
senke
b49045073e
feat(monitoring): add live stream Prometheus metrics
2026-02-24 09:53:29 +01:00
senke
8062ec685c
feat(live): add handler endpoints for Go Live (me, key, regenerate, update)
2026-02-24 09:53:01 +01:00
senke
083fe2e50d
feat(live): stream key generation, ListByUser, RegenerateStreamKey
2026-02-24 09:52:04 +01:00
senke
076a132c0f
feat(live): add migration 117 and model fields for Go Live
2026-02-24 09:51:21 +01:00
senke
da20e83e09
docs: complete roadmap documentation v0.703 to v0.903 (v1.0 target)
...
Add Release Scope, Implementation Plan, and Smoke Test for 7 versions:
- v0.703: Go Live & Streaming Complet (Phase 7 Finale)
- v0.801: UX/UI Polish, Accessibilite & PWA (Phase 8)
- v0.802: Cloud Complet, Fichiers & Gear Avance (Phase 8)
- v0.803: Securite, Compliance & Outillage Dev (Phase 8)
- v0.901: Marketplace Complet & Analytics Avances (Phase 9)
- v0.902: Social Complet, Chat & Notifications (Phase 9)
- v0.903: Stabilisation v1.0 & Launch Readiness (Phase 9)
21 documents total (3 per version), covering all remaining features
needed to reach v1.0 from v0.702.
2026-02-24 01:32:04 +01:00
senke
78122f1145
chore(docs): archive V0_702_RELEASE_SCOPE
2026-02-24 00:22:17 +01:00
senke
f4f5f32c2d
docs: add RETROSPECTIVE_V0702, placeholder V0_703, update SCOPE_CONTROL
2026-02-24 00:21:55 +01:00
senke
6293a88476
docs: update CHANGELOG, PROJECT_STATE, FEATURE_STATUS for v0.702
2026-02-24 00:21:20 +01:00
senke
63e964746a
docs: add reviews, invoices, refunds to API_REFERENCE.md
2026-02-24 00:20:29 +01:00
senke
c44b65da4b
feat(storybook): enhance ProductDetailView stories with Error state
2026-02-24 00:20:09 +01:00
senke
7895e7ed50
test(marketplace): add refund order unit tests
2026-02-24 00:19:42 +01:00
senke
c22866fe8c
test(marketplace): add invoice generation unit tests
2026-02-24 00:19:10 +01:00
senke
a40c27bcc9
test(marketplace): add product review unit tests
2026-02-24 00:18:45 +01:00
senke
22c74e9beb
feat(mocks): add MSW handlers for product reviews and invoice download
2026-02-24 00:18:02 +01:00
senke
a3ad4d4764
feat(marketplace): add ProductDetailPage, lazy export, route /marketplace/products/:id
2026-02-24 00:17:39 +01:00
senke
3b429e726a
docs: add v0.702 scope, implementation plan, and smoke test
...
Define v0.702 scope (Reviews wiring, Invoices, Refunds, Product Detail route),
detailed 12-step implementation plan, and comprehensive smoke test checklist.
2026-02-23 23:52:46 +01:00
senke
c785e61e69
feat(v0.701): AdminTransfers page/route, MSW, stories, Deep Health, API ref, docs, scope v0.702
...
Backend API CI / test-unit (push) Failing after 0s
Backend API CI / test-integration (push) Failing after 0s
Frontend CI / test (push) Failing after 0s
Storybook Audit / Build & audit Storybook (push) Failing after 0s
- Step 13: AdminTransfersPage, LazyAdminTransfers, route /admin/transfers
- Step 14: MSW handlers admin transfers
- Step 15: AdminTransfersView stories (Default, Empty, WithFailedTransfers, Error, Loading)
- Step 16-17: DeepHealth handler (disk, config), GET /health/deep
- Step 19: health_deep_test.go (4 tests)
- Step 20: docs/API_REFERENCE.md
- Step 21: Archive V0_604, MIGRATIONS.md migration 116
- Step 22: CHANGELOG, PROJECT_STATE, FEATURE_STATUS v0.701
- Step 23: RETROSPECTIVE_V0701, V0_702 placeholder, SCOPE_CONTROL, .cursorrules
- Step 24: Archive V0_701_RELEASE_SCOPE
- Fix: AdminTransfersView Select component (use options API)
2026-02-23 23:42:02 +01:00
senke
36e7bfc355
feat(frontend): add admin transfer API functions in commerceService
2026-02-23 23:36:09 +01:00
senke
b3a74d6740
test(admin): add admin transfer handler tests
2026-02-23 23:35:11 +01:00
