nexarch

0 Fork 0

Author	SHA1	Message	Date
patrickandClaude Sonnet 5.5	07eb74cadf	Root-Modul: apierror und httpharden aus common v0.1.0 CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 5s Details CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 4s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 21s Details CI / Web (dms-browser) (pull_request) Failing after 1m27s Details CI / Web (pdf-viewer) (pull_request) Failing after 1m2s Details CI / Web (shl) (pull_request) Failing after 11s Details CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 5s Details CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 4s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 19s Details CI / Web (dms-browser) (push) Failing after 1m26s Details CI / Web (pdf-viewer) (push) Failing after 1m3s Details CI / Web (shl) (push) Failing after 11s Details Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 13m12s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details DB-Integrationstests / db-tests (pull_request) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s Details Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s Details Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s Details RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s Details Core-Schnittstellen-Vertragstests / contract-tests (push) Successful in 12m23s Details Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-28 09:37:03 +01:00
patrickandClaude Sonnet 5	17988c53c9	IAM-23: sitzungssignatur asymmetrisch (Ed25519), HS256-Mindestlaenge, Uebergangs-Dualmodus Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 10:22:49 +02:00
patrickandClaude Sonnet 5	c5fddad8a5	API-17: gehaertete HTTP-Server (Timeouts, Body-Limit) in allen Diensten (QA-15 F-05) Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 00:49:27 +02:00
sysops	bc46c3e320	RBAC-07: rechte-administrations-dienst-starten - cmd/rbac-admin-api: startet internal/rbac.Handler (RBAC-05), hinter auth.RequireAuth mit demselben JWT-Secret wie IAM-16 (account-api) - reines Wiring, kein Diff an internal/rbac/ (verifiziert) - real deployed auf 131, cross-service-Session real bewiesen: Login gegen account-api (Port 8099), dasselbe Session-Cookie gegen rbac-admin-api (Port 8100) verwendet -> echte Rollenliste, ohne Cookie -> 401 - Migrationen (role_assignments/groups) real auf tenant_acme angewendet, reale Grant-Luecke behoben und verifiziert - Bootstrap-Erkenntnis dokumentiert: ListRoles selbst verlangt bereits eine Rolle mit PermManageUsers, Testnutzer daher mit direkter DB-Bootstrap-Rolle angelegt (wie Ersteinrichtung) Pruefungen siehe docs/RBAC-07-PRUEFPROTOKOLL.md	2026-08-30 21:24:35 +02:00