Commit Graph
4 Commits
Author SHA1 Message Date
patrickandClaude Sonnet 5 2acefefd8d QA-06: Groessenvalidierung, 409 bei unvollstaendigem Upload, Testkorrektur
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-20 09:37:49 +02:00
patrickandClaude Sonnet 5 7b60a37cff QA-06: zentraler Berechtigungs-Guard, Upload-/Content-Haertung, Pruefgate-Tests
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-20 09:37:01 +02:00
patrickandClaude Sonnet 5 9501afe963 DOC-02 in die kette: Complete-Aufrufer angepasst, uploadapi meldet Dubletten als 409
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-19 23:00:30 +02:00
patrickandClaude Sonnet 5 2ab7c1a8d0 DOC-03: backend-voraussetzung — uploadapi HTTP-Handler fuer DOC-01
DOC-01 lieferte bislang nur einen Go-Service (internal/upload), keinen
HTTP-Endpunkt - dieselbe Luecke wie bei DOC-05/documentapi. Die
Drag-and-Drop-Oberflaeche braucht die oeffentliche HTTP-Schnittstelle, nicht
Go-Funktionsaufrufe. internal/uploadapi kapselt upload.Service hinter
POST /uploads, PUT /uploads/{id}/chunk, GET /uploads/{id},
POST /uploads/{id}/complete, ohne Server-Logik zu duplizieren. Fehler
werden auf 400 (ErrFileTooLarge/ErrDisallowedMimeType) bzw. 404
(ErrSessionNotFound) abgebildet, damit die Oberflaeche verstaendliche
Meldungen zeigen kann.

handler_test.go deckt den vollstaendigen Start->Chunk->Status->Complete-
Zyklus ueber HTTP sowie beide Fehlerfaelle ab (TEST_TENANT_DSN-basiert,
gleiche Fixture-Struktur wie internal/upload/service_test.go).

Go-Build/-Test dieses Pakets konnte in dieser Session NICHT real auf dem
Testhost (192.168.1.131) verifiziert werden - der rsync-Sync-Schritt wurde
vom Auto-Mode-Classifier als Data Exfiltration blockiert. Siehe
dms/docs/DOC-03-PRUEFPROTOKOLL.md fuer die vollstaendige Dokumentation
dieser Einschraenkung.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-18 12:28:11 +02:00