scripte/nexarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
174 Commits 154 Branches 0 Tags
251657bab50e06a49622f41d5c3d3c553dee1d0e
Commit Graph
174 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
sysops 251657bab5 Merge branch 'feature/qa-08-last-leistungstest' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	internal/apiserver/server.go
 2026-08-29 17:09:22 +02:00
sysops 767a2584ee Merge branch 'feature/qa-07-schnittstellen-vertragstests' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	internal/apiserver/server.go
#	internal/flag/flag.go
 2026-08-29 17:09:04 +02:00
sysops aeef711e91 Merge branch 'feature/iam-15-timing-safe-vergleich-als-projektweite-coding-konvention' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:08:42 +02:00
sysops e39fb6f237 Merge branch 'feature/ops-06-automatisiertes-schwachstellen-scanning-supply-chain' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	DEVLOG.md
#	go.sum
 2026-08-29 17:08:37 +02:00
sysops 53af28d928 Merge branch 'feature/ops-05-alerting-bei-schwellwert-ueberschreitung' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	DEVLOG.md
#	go.mod
#	go.sum
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 17:06:55 +02:00
sysops f442f07a27 Merge branch 'feature/ops-04-incident-response-plan-inkl-dsgvo-meldefristen' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:25 +02:00
sysops 33ed699dac Merge branch 'feature/lic-05-speicherverbrauch-metrik-je-tenant' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:25 +02:00
sysops a70f439846 Merge branch 'feature/api-07-zentrale-webhook-registry-zustellung' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:24 +02:00
sysops 1589fd31cb Merge branch 'feature/aud-05-audit-log-registrierung-bei-archive-retention-engine' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:24 +02:00
sysops 33a73bb64c Merge branch 'feature/api-06-wiederanlauf-nachsynchronisierung-nach-core-ausfall' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	go.mod
#	internal/moduletrust/cache.go
 2026-08-29 17:05:18 +02:00
sysops b347efed52 Merge branch 'feature/ops-03-metrics-aggregation-ueber-module-hinweg' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:03 +02:00
sysops 19548d6d6d Merge branch 'feature/api-04-openapi-schnittstellenbeschreibung' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:03 +02:00
sysops 8d8266a2fd Merge branch 'feature/aud-02-unveraenderliches-protokoll-append-only' into feature/qa-05-abnahme-compliance-pruefung-core 2026-08-29 17:05:03 +02:00
sysops 37edf98618 Merge branch 'feature/ten-08-tenant-loeschung-unter-retention-vorbehalt-gobd' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	internal/tenant/registry.go
 2026-08-29 17:04:55 +02:00
sysops c7ff26d857 Merge branch 'feature/qa-03-pruefgate-rechte-policy' into feature/qa-05-abnahme-compliance-pruefung-core 
# Conflicts:
#	internal/flag/flag.go
 2026-08-29 17:03:56 +02:00
sysopsandClaude Sonnet 5 349104a809 QA-09: barrierefreiheits-audit 
Voller Merge von TEN-05/IAM-08/RBAC-05/LIC-04/AUD-04/CFG-04/OPS-02 (SHL-01
bereits Bestandteil) nach feature/qa-09-barrierefreiheits-audit. WCAG-2.1-AA-
Audit ueber alle 7 Core-Frontends (15 Seiten): automatisierte Pruefung
(pa11y/HTML_CodeSniffer WCAG2AA) und automatisiertes Tastatur-Traversal
(Puppeteer) auf 192.168.1.131 durchgefuehrt, Ergebnis nach Fixes 0/15
Verstoesse, 100% Tastaturerreichbarkeit ohne Fallen.

Vier reale WCAG-Verstoesse gefunden und behoben: ungueltiger
autocomplete="username" auf type="email"-Feldern (account, 2 Seiten) sowie
fehlende zugaengliche Namen auf Filter-/Eingabefeldern in audit-log,
lic-admin und tenant-admin (aria-label ergaenzt).

Zusaetzlich ein realer Testinfrastruktur-Fehler in internal/adminapi
gefunden: lichandler_test.go's Cleanup rief `DELETE FROM tenant_licenses
WHERE tenant_id = $1` OHNE das $1-Argument auf (Fehler durch `_, _ =`
verschluckt) - die Tenant-Zeile blieb dadurch ueber eine FK-Constraint
dauerhaft haengen und verfaelschte internal/migrate im vollen Testlauf,
analog zu den in QA-04 gefundenen defer/t.Cleanup-Bugs. Nur Testcode
betroffen.

Ein Restbefund terminiert: echter Bildschirmleser-Durchlauf (NVDA/
VoiceOver) steht mangels grafischer Testumgebung noch aus, Frist vor QA-05
(siehe docs/QA-09-BARRIEREFREIHEITS-AUDIT.md Abschnitt 5).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HhgFcLS8tYMhDJpP74C6AQ
 2026-08-29 10:27:15 +02:00
sysops d1977e6c2e fix: verbleibende go.sum-Merge-Marker aus vorherigen Merges bereinigt 2026-08-29 10:03:00 +02:00
sysops 03cd1e01c5 Merge branch 'feature/ops-02-zentrale-statusseite' into feature/qa-09-barrierefreiheits-audit 
# Conflicts:
#	DEVLOG.md
#	scripts/reset-test-env.sh
 2026-08-29 10:02:30 +02:00
sysops 98944b1412 Merge branch 'feature/cfg-04-benachrichtigungs-einstellungen-oberflaeche' into feature/qa-09-barrierefreiheits-audit 
# Conflicts:
#	DEVLOG.md
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 10:01:48 +02:00
sysops 93a49dd72c Merge branch 'feature/aud-04-audit-log-ansicht' into feature/qa-09-barrierefreiheits-audit 
# Conflicts:
#	DEVLOG.md
#	go.mod
#	go.sum
#	scripts/reset-test-env.sh
 2026-08-29 10:00:28 +02:00
sysops 8bd5bb5a52 Merge branch 'feature/lic-04-lizenz-modul-verwaltungsoberflaeche' into feature/qa-09-barrierefreiheits-audit 
# Conflicts:
#	DEVLOG.md
#	go.mod
#	go.sum
#	internal/flag/flag.go
#	scripts/reset-test-env.sh
 2026-08-29 09:59:50 +02:00
sysops 8a779531e1 Merge branch 'feature/rbac-05-rechte-administrationsoberflaeche' into feature/qa-09-barrierefreiheits-audit 
# Conflicts:
#	DEVLOG.md
 2026-08-29 09:58:58 +02:00
sysopsandClaude Sonnet 5 9f641fec76 QA-04: sicherheits-penetrationspruefung-core 
Voller Merge von RBAC-02/IAM-06/IAM-07/API-03/API-10/API-08/API-09/IAM-10/
IAM-11/IAM-13 plus echte Angriffstests (internal/pentest) gegen SSO/OIDC
(alg=none, Fremdschluessel, Claims-Manipulation, Nonce-Replay), Rate-
Limiting/Lockout im simulierten Mehrinstanz-Betrieb, zentrale Policy-
Durchsetzung (Rechteausweitung, struktureller Guard-Bypass) und Master-
Key-/Tenant-KEK-Rotation. 29/29 Pakete gruen auf 192.168.1.131.

Vier real gefundene Testinfrastruktur-Fehler behoben: reset-test-env.sh
liess tenant_keks (und weitere neuere Registry-Tabellen) beim Reset stehen
(FK-CASCADE loescht nur die Constraint, keine Zeilen); zwei E2E-Tests und
kek_test.go schlossen ihren adminPool per defer VOR ihrer t.Cleanup-
Bereinigung (t.Cleanup laeuft immer nach allen defers); migrate_test.go
hatte ein Testschema ohne die TEN-04-Lifecycle-Spalten. Alle vier Fixes
betreffen ausschliesslich Testcode, kein Produktionscode geaendert.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HhgFcLS8tYMhDJpP74C6AQ
 2026-08-29 09:57:36 +02:00
sysops 5e6cb4e2db Merge branch 'feature/api-09-mtls-zwischen-modul-instanzen-verteilte-installation' into feature/qa-04-sicherheits-penetrationspruefung-core 2026-08-29 09:43:42 +02:00
sysops b8c3f1b989 Merge branch 'feature/api-08-security-header-baseline-fuer-alle-frontends' into feature/qa-04-sicherheits-penetrationspruefung-core 2026-08-29 09:43:42 +02:00
sysops ca547bcd54 Merge branch 'feature/api-10-master-key-verwaltung-tenant-schluesselhierarchie-kms-anbindung' into feature/qa-04-sicherheits-penetrationspruefung-core 
# Conflicts:
#	go.mod
#	go.sum
#	scripts/reset-test-env.sh
 2026-08-29 09:43:34 +02:00
sysops cbbf5a348a Merge branch 'feature/api-03-zentrales-rate-limiting-api-gateway-schicht' into feature/qa-04-sicherheits-penetrationspruefung-core 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 09:43:05 +02:00
sysops 550fc70d50 Merge branch 'feature/rbac-02-policy-enforcement-schicht-zentral' into feature/qa-04-sicherheits-penetrationspruefung-core 
# Conflicts:
#	scripts/reset-test-env.sh
 2026-08-29 09:42:39 +02:00
sysops 314b821929 QA-02: echter End-to-End-Testlauf ueber TEN-01..07/IAM-01..14 
Volle Merge-Verifikation aller 21 Vorbedingungs-Tickets: neue
internal/e2e-Tests (Tenant-Onboarding-Login-Flow, Cross-Tenant-Isolation)
gegen echte Postgres-Instanz, docs/QA-02-PRUEFPROTOKOLL.md mit
Ticket-zu-Test-Zuordnung. Dabei echten Merge-Konflikt zwischen IAM-12 und
IAM-13 gefunden und behoben (jwk/jwkSet-Typkollision in internal/oidc).
124/124 Tests gruen auf 131.
 2026-08-29 09:35:31 +02:00
sysops aecfcdf702 QA-03: build/test-ergebnis auf 131 ergaenzt (30/30 tests gruen, bypass-fund bestaetigt) 2026-08-29 09:24:42 +02:00
sysops 4f84ee23dc Merge branch 'feature/iam-14-passwort-richtlinien' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 09:22:40 +02:00
sysops 559b650af7 Merge branch 'feature/iam-13-oidc-provider-fuer-drittanwendungen' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	DEVLOG.md
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 09:22:10 +02:00
sysops 073e61664f QA-03: pruefgate-rechte-policy (rbac-04 gemergt, umgehungsversuch+rollenwechsel-tests, pruefprotokoll) 2026-08-29 00:15:57 +02:00
sysops fb0ff9e779 Merge branch 'feature/iam-12-aktive-sitzungen-verwaltung' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:12:06 +02:00
sysops 912857d35b Merge branch 'feature/iam-11-saml-2-0-anbindung' into feature/qa-02-pruefgate-identitaet-mandanten 2026-08-29 00:11:52 +02:00
sysops 2f832292b3 Merge branch 'feature/iam-10-passwortlose-anmeldung-via-webauthn-passkey' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:11:46 +02:00
sysops c6933f0e2f Merge branch 'feature/iam-09-api-token-service-accounts' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:11:35 +02:00
sysops f89ec925fc Merge branch 'feature/iam-08-benutzerprofil-login-oberflaeche' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	DEVLOG.md
 2026-08-29 00:11:23 +02:00
sysops 6c8582c1c2 Merge branch 'feature/iam-07-account-lockout-login-rate-limiting' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:11:09 +02:00
sysops 95d1a6810a Merge branch 'feature/iam-06-sso-anmeldung-ueber-oidc' into feature/qa-02-pruefgate-identitaet-mandanten 2026-08-29 00:10:39 +02:00
sysops ca07ae4d68 Merge branch 'feature/iam-05-ldap-active-directory-anbindung' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:10:39 +02:00
sysops 0a2e71aec9 Merge branch 'feature/iam-04-zwei-faktor-authentifizierung-totp' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	DEVLOG.md
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:10:25 +02:00
sysops ba23d4d90d Merge branch 'feature/rbac-04-modul-scoped-berechtigungen' into feature/qa-03-pruefgate-rechte-policy 2026-08-29 00:10:21 +02:00
sysops 24c8331d45 Merge branch 'feature/iam-03-passwort-reset-einladungs-flow' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh
 2026-08-29 00:10:04 +02:00
sysops 13874683e8 Merge branch 'feature/iam-02-login-session-jwt-grundgeruest' into feature/qa-02-pruefgate-identitaet-mandanten 2026-08-29 00:09:35 +02:00
sysops 6d288732c6 Merge branch 'feature/ten-05-tenant-verwaltungsoberflaeche' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	internal/tenant/registry.go
 2026-08-29 00:09:28 +02:00
sysops a6340d8850 Merge branch 'feature/ten-07-migrations-orchestrierung-tenant-datenbanken' into feature/qa-02-pruefgate-identitaet-mandanten 2026-08-29 00:08:50 +02:00
sysops b13d95f4a3 Merge branch 'feature/ten-06-connection-routing-pooling-pro-mandant' into feature/qa-02-pruefgate-identitaet-mandanten 2026-08-29 00:08:45 +02:00
sysops 2147b4c7fd DEVLOG: Sessionlog-Eintrag (Auto-Hook) 2026-08-29 00:08:45 +02:00
sysops 96a54d93a4 Merge branch 'feature/ten-04-tenant-lifecycle-suspendieren-reaktivieren-loeschen' into feature/qa-02-pruefgate-identitaet-mandanten 
# Conflicts:
#	scripts/reset-test-env.sh
 2026-08-29 00:08:30 +02:00