sysops
93a49dd72c
Merge branch 'feature/aud-04-audit-log-ansicht' into feature/qa-09-barrierefreiheits-audit
...
# Conflicts:
# DEVLOG.md
# go.mod
# go.sum
# scripts/reset-test-env.sh
2026-08-29 10:00:28 +02:00
sysops
8bd5bb5a52
Merge branch 'feature/lic-04-lizenz-modul-verwaltungsoberflaeche' into feature/qa-09-barrierefreiheits-audit
...
# Conflicts:
# DEVLOG.md
# go.mod
# go.sum
# internal/flag/flag.go
# scripts/reset-test-env.sh
2026-08-29 09:59:50 +02:00
sysops
8a779531e1
Merge branch 'feature/rbac-05-rechte-administrationsoberflaeche' into feature/qa-09-barrierefreiheits-audit
...
# Conflicts:
# DEVLOG.md
2026-08-29 09:58:58 +02:00
sysops and Claude Sonnet 5
9f641fec76
QA-04: sicherheits-penetrationspruefung-core
...
Voller Merge von RBAC-02/IAM-06/IAM-07/API-03/API-10/API-08/API-09/IAM-10/
IAM-11/IAM-13 plus echte Angriffstests (internal/pentest) gegen SSO/OIDC
(alg=none, Fremdschluessel, Claims-Manipulation, Nonce-Replay), Rate-
Limiting/Lockout im simulierten Mehrinstanz-Betrieb, zentrale Policy-
Durchsetzung (Rechteausweitung, struktureller Guard-Bypass) und Master-
Key-/Tenant-KEK-Rotation. 29/29 Pakete gruen auf 192.168.1.131.
Vier real gefundene Testinfrastruktur-Fehler behoben: reset-test-env.sh
liess tenant_keks (und weitere neuere Registry-Tabellen) beim Reset stehen
(FK-CASCADE loescht nur die Constraint, keine Zeilen); zwei E2E-Tests und
kek_test.go schlossen ihren adminPool per defer VOR ihrer t.Cleanup-
Bereinigung (t.Cleanup laeuft immer nach allen defers); migrate_test.go
hatte ein Testschema ohne die TEN-04-Lifecycle-Spalten. Alle vier Fixes
betreffen ausschliesslich Testcode, kein Produktionscode geaendert.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01HhgFcLS8tYMhDJpP74C6AQ
2026-08-29 09:57:36 +02:00
sysops
5e6cb4e2db
Merge branch 'feature/api-09-mtls-zwischen-modul-instanzen-verteilte-installation' into feature/qa-04-sicherheits-penetrationspruefung-core
2026-08-29 09:43:42 +02:00
sysops
b8c3f1b989
Merge branch 'feature/api-08-security-header-baseline-fuer-alle-frontends' into feature/qa-04-sicherheits-penetrationspruefung-core
2026-08-29 09:43:42 +02:00
sysops
ca547bcd54
Merge branch 'feature/api-10-master-key-verwaltung-tenant-schluesselhierarchie-kms-anbindung' into feature/qa-04-sicherheits-penetrationspruefung-core
...
# Conflicts:
# go.mod
# go.sum
# scripts/reset-test-env.sh
2026-08-29 09:43:34 +02:00
sysops
cbbf5a348a
Merge branch 'feature/api-03-zentrales-rate-limiting-api-gateway-schicht' into feature/qa-04-sicherheits-penetrationspruefung-core
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 09:43:05 +02:00
sysops
550fc70d50
Merge branch 'feature/rbac-02-policy-enforcement-schicht-zentral' into feature/qa-04-sicherheits-penetrationspruefung-core
...
# Conflicts:
# scripts/reset-test-env.sh
2026-08-29 09:42:39 +02:00
sysops
314b821929
QA-02: echter End-to-End-Testlauf ueber TEN-01..07/IAM-01..14
...
Volle Merge-Verifikation aller 21 Vorbedingungs-Tickets: neue
internal/e2e-Tests (Tenant-Onboarding-Login-Flow, Cross-Tenant-Isolation)
gegen echte Postgres-Instanz, docs/QA-02-PRUEFPROTOKOLL.md mit
Ticket-zu-Test-Zuordnung. Dabei echten Merge-Konflikt zwischen IAM-12 und
IAM-13 gefunden und behoben (jwk/jwkSet-Typkollision in internal/oidc).
124/124 Tests gruen auf 131.
2026-08-29 09:35:31 +02:00
sysops
4f84ee23dc
Merge branch 'feature/iam-14-passwort-richtlinien' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 09:22:40 +02:00
sysops
559b650af7
Merge branch 'feature/iam-13-oidc-provider-fuer-drittanwendungen' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# DEVLOG.md
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 09:22:10 +02:00
sysops
fb0ff9e779
Merge branch 'feature/iam-12-aktive-sitzungen-verwaltung' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:12:06 +02:00
sysops
912857d35b
Merge branch 'feature/iam-11-saml-2-0-anbindung' into feature/qa-02-pruefgate-identitaet-mandanten
2026-08-29 00:11:52 +02:00
sysops
2f832292b3
Merge branch 'feature/iam-10-passwortlose-anmeldung-via-webauthn-passkey' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:11:46 +02:00
sysops
c6933f0e2f
Merge branch 'feature/iam-09-api-token-service-accounts' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:11:35 +02:00
sysops
f89ec925fc
Merge branch 'feature/iam-08-benutzerprofil-login-oberflaeche' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# DEVLOG.md
2026-08-29 00:11:23 +02:00
sysops
6c8582c1c2
Merge branch 'feature/iam-07-account-lockout-login-rate-limiting' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:11:09 +02:00
sysops
95d1a6810a
Merge branch 'feature/iam-06-sso-anmeldung-ueber-oidc' into feature/qa-02-pruefgate-identitaet-mandanten
2026-08-29 00:10:39 +02:00
sysops
ca07ae4d68
Merge branch 'feature/iam-05-ldap-active-directory-anbindung' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:10:39 +02:00
sysops
0a2e71aec9
Merge branch 'feature/iam-04-zwei-faktor-authentifizierung-totp' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# DEVLOG.md
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:10:25 +02:00
sysops
24c8331d45
Merge branch 'feature/iam-03-passwort-reset-einladungs-flow' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
# scripts/run-checks.sh
2026-08-29 00:10:04 +02:00
sysops
13874683e8
Merge branch 'feature/iam-02-login-session-jwt-grundgeruest' into feature/qa-02-pruefgate-identitaet-mandanten
2026-08-29 00:09:35 +02:00
sysops
6d288732c6
Merge branch 'feature/ten-05-tenant-verwaltungsoberflaeche' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# internal/tenant/registry.go
2026-08-29 00:09:28 +02:00
sysops
a6340d8850
Merge branch 'feature/ten-07-migrations-orchestrierung-tenant-datenbanken' into feature/qa-02-pruefgate-identitaet-mandanten
2026-08-29 00:08:50 +02:00
sysops
b13d95f4a3
Merge branch 'feature/ten-06-connection-routing-pooling-pro-mandant' into feature/qa-02-pruefgate-identitaet-mandanten
2026-08-29 00:08:45 +02:00
sysops
2147b4c7fd
DEVLOG: Sessionlog-Eintrag (Auto-Hook)
2026-08-29 00:08:45 +02:00
sysops
96a54d93a4
Merge branch 'feature/ten-04-tenant-lifecycle-suspendieren-reaktivieren-loeschen' into feature/qa-02-pruefgate-identitaet-mandanten
...
# Conflicts:
# scripts/reset-test-env.sh
2026-08-29 00:08:30 +02:00
sysops
e65625841c
DEVLOG: Sessionlog-Eintrag (Auto-Hook)
2026-08-28 23:45:51 +02:00
sysops
fbcc9db8f1
RBAC-05: web/rbac-admin next.js-frontend (rollen+gruppen-verwaltung, audit-verlauf) auf shl-01
2026-08-28 23:43:09 +02:00
sysops
bd80f0cb16
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/rbac-05-rechte-administrationsoberflaeche
...
# Conflicts:
# DEVLOG.md
2026-08-28 23:41:36 +02:00
sysops
051af43dec
RBAC-05: backend — handler.go (rollen-/gruppenverwaltung, selbst-eskalationsschutz), group.go ListGroups/Members
2026-08-28 23:41:30 +02:00
sysops
9de9005ced
Merge branch 'feature/iam-02-login-session-jwt-grundgeruest' into feature/rbac-05-rechte-administrationsoberflaeche
2026-08-28 23:38:57 +02:00
sysops
1b6a1591c7
Merge branch 'feature/rbac-03-gruppen-abteilungen' into feature/rbac-05-rechte-administrationsoberflaeche
2026-08-28 23:38:52 +02:00
sysops
df2a54f0e6
IAM-08: fix — Suspense-Boundary fuer useSearchParams() in password-reset/complete (Next.js-14-App-Router-Anforderung, Build brach beim Prerendering ab)
2026-08-28 23:38:06 +02:00
sysops
f627caaacb
IAM-08: benutzerprofil-login-oberflaeche (login+2fa/passwort-reset/profil-backend-handler + web/account next.js-frontend auf shl-01)
2026-08-28 23:34:36 +02:00
sysops
f0139c889a
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/iam-08-benutzerprofil-login-oberflaeche
...
# Conflicts:
# DEVLOG.md
2026-08-28 23:28:33 +02:00
sysops
d9fb2e33f2
Merge branch 'feature/iam-03-passwort-reset-einladungs-flow' into feature/iam-08-benutzerprofil-login-oberflaeche
2026-08-28 23:28:23 +02:00
sysops
6885319333
DEVLOG: Sessionlog-Eintrag (Auto-Hook)
2026-08-28 23:27:34 +02:00
sysops
6666125a8a
DEVLOG: Sessionlog-Eintrag (Auto-Hook)
2026-08-28 23:26:21 +02:00
sysops
42466c7b40
IAM-13: oidc-provider-fuer-drittanwendungen (client-registrierung, authorization-code-flow, jwks ueber API-05-schluessel)
2026-08-28 23:25:45 +02:00
sysops
1b4c3db9b8
DEVLOG: Sessionlog-Eintrag (Auto-Hook)
2026-08-28 22:54:02 +02:00
sysops
6537888da6
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/aud-04-audit-log-ansicht
2026-08-28 22:02:02 +02:00
sysops
98b3bcdf43
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/lic-04-lizenz-modul-verwaltungsoberflaeche
2026-08-28 22:02:02 +02:00
sysops
12b1978ae1
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/ten-05-tenant-verwaltungsoberflaeche
2026-08-28 22:02:02 +02:00
sysops
bfa5c61db5
SHL-01: fix — Test-Cleanup zwischen Dialog-Tests (afterEach(cleanup), sonst stapeln sich gerenderte DOM-Bäume)
2026-08-28 22:01:56 +02:00
sysops
554c9aae66
AUD-04: fix — transpilePackages fuer @nexarch/shl (Next.js transpiliert node_modules sonst nicht, Build brach ab)
2026-08-28 21:56:27 +02:00
sysops
1ba90319a2
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/aud-04-audit-log-ansicht
2026-08-28 21:56:20 +02:00
sysops
5f3eb16fae
LIC-04: fix — transpilePackages fuer @nexarch/shl (Next.js transpiliert node_modules sonst nicht, Build brach ab)
2026-08-28 21:56:15 +02:00
sysops
c8f72c30f3
Merge branch 'feature/shl-01-ui-shell-design-system-zentral' into feature/lic-04-lizenz-modul-verwaltungsoberflaeche
2026-08-28 21:56:07 +02:00