Chrome auf 204: Browser-/a11y-Nachtrag UX-10/OPS-11 #132

Closed
patrick wants to merge 0 commits from fix/browser-audit-nachtrag-mit-chrome-204 into integration/gesamtprojekt
pull from: fix/browser-audit-nachtrag-mit-chrome-204
Owner

Chrome + pa11y auf Entwicklungshost 204 installiert (Muster wie KoSIT/veraPDF, Prüfsumme+GPG-Signatur verifiziert). web/a11y-audit/run.sh lief damit erstmals real: 68/68 bestanden, keine axe-Verstöße.

Echter Fund behoben: keyboard-flow.js rief die API ohne Identität auf.

Offen (eigene Folgetickets): UX-11-Seiten in a11y-fixture verdrahten, a11y-Audit im Token-Modus.

🤖 Generated with Claude Code

Chrome + pa11y auf Entwicklungshost 204 installiert (Muster wie KoSIT/veraPDF, Prüfsumme+GPG-Signatur verifiziert). `web/a11y-audit/run.sh` lief damit erstmals real: 68/68 bestanden, keine axe-Verstöße. Echter Fund behoben: `keyboard-flow.js` rief die API ohne Identität auf. Offen (eigene Folgetickets): UX-11-Seiten in a11y-fixture verdrahten, a11y-Audit im Token-Modus. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 2 commits 2026-09-22 22:30:06 +02:00
a11y-audit: caller-Identitaet an getJSON-Aufrufe in keyboard-flow.js ergaenzen
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
42724d6adb
folderapi.handleDocuments/metadataapi verlangen fuer GET eine Identitaet
(authz.Identity liest 'caller' oder X-User-Id). Ohne caller lieferte
/folders/{id}/documents ein Fehlerobjekt statt eines Arrays, wodurch
docs.some() abstuerzte. Erster echter Chrome-Lauf auf Host 204 deckte den
latenten Fehler auf.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Chrome auf 204 installiert, Browser-/a11y-Nachtrag UX-10/OPS-11 (68/68 bestanden)
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
f03821b29d
Google Chrome stable 154.0.8037.57 + pa11y 10.0.0 auf Entwicklungshost 204
installiert (Prüfsumme/GPG-Signatur verifiziert, deploy/chrome/README.md).
web/a11y-audit/run.sh lief damit erstmals real dort: 68/68 Prüfschritte
bestanden, keine axe-Verstöße, pdf-viewer vollständig (vorher 1/5).

Echter Fund behoben: keyboard-flow.js rief die API ohne Identität auf,
folderapi.handleDocuments verlangt aber immer 'caller'/X-User-Id.

UX-11 (vier neue Seiten) und ein Token-Modus-Lauf bleiben offen, weil sie
eine eigenständige Erweiterung der Testfixture brauchen, kein Nachtrag.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick added 1 commit 2026-09-22 22:30:07 +02:00
Chrome auf 204 installiert, Browser-/a11y-Nachtrag UX-10/OPS-11 (68/68 bestanden)
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
f03821b29d
Google Chrome stable 154.0.8037.57 + pa11y 10.0.0 auf Entwicklungshost 204
installiert (Prüfsumme/GPG-Signatur verifiziert, deploy/chrome/README.md).
web/a11y-audit/run.sh lief damit erstmals real dort: 68/68 Prüfschritte
bestanden, keine axe-Verstöße, pdf-viewer vollständig (vorher 1/5).

Echter Fund behoben: keyboard-flow.js rief die API ohne Identität auf,
folderapi.handleDocuments verlangt aber immer 'caller'/X-User-Id.

UX-11 (vier neue Seiten) und ein Token-Modus-Lauf bleiben offen, weil sie
eine eigenständige Erweiterung der Testfixture brauchen, kein Nachtrag.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick closed this pull request 2026-09-25 23:30:27 +02:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#132