timemaster

feat(deploy): deploy.sh + lokale Host-Konfig, server-update/setup_server übernehmen Unit und sudoers aus dem Repo

Security Audit #116:Commit 7e165d37b6 pushed by patrick

main

2026-11-06 09:46:56 +01:00

0s

fix(service): ProtectHome entfernt (asyncpg prüft ~/.postgresql)

Security Audit #115:Commit e766974018 pushed by patrick

main

2026-11-06 01:46:45 +01:00

0s

fix(security): Dienst als Systemuser auf 127.0.0.1, TLS-Erneuerung per sudo

Security Audit #114:Commit c02338eb7a pushed by patrick

main

2026-11-06 01:46:45 +01:00

0s

test(ha): Token deaktivierter Firma liefert 404

Security Audit #113:Commit 8a55e183fd pushed by patrick

main

2026-11-06 01:46:45 +01:00

0s

fix(security): Krankheitsdaten im Kalender maskieren, Art.-15-Export nur HR/Admin, Login-Enumeration, Session-Invalidierung bei Passwortwechsel

Security Audit #112:Commit b6eda4e2d5 pushed by patrick

main

2026-11-05 23:46:30 +01:00

0s

fix(security): Audit-Funde M-1,M-2,M-3,M-6,M-7,N-1..N-3 (Client-IP-Trust, AuditLog company_id, Token-Feeds, Mass-Assignment, Kiosk-Heartbeat)

Security Audit #111:Commit 8672f92ee5 pushed by patrick

main

2026-11-05 23:46:30 +01:00

0s

fix(security): PDF-Export ohne Ressourcenzugriff, HTML-Escaping, CSV/XLSX Formula-Injection

Security Audit #110:Commit a3470a135c pushed by patrick

main

2026-11-05 23:46:30 +01:00

0s

feat(portal): Token-Verwaltung für das Buchhaltungsportal in den Firmeneinstellungen

Security Audit #109:Commit 8dfee59bf0 pushed by patrick

main

2026-11-04 22:57:57 +01:00

0s

docs: DEVLOG-Einträge ergänzt

Security Audit #108:Scheduled

main

2026-11-03 07:42:34 +01:00

0s

docs: DEVLOG-Einträge ergänzt

Security Audit #107:Commit 43cdece01f pushed by patrick

main

2026-10-31 15:25:08 +01:00

0s

fix(busylight): Pull-Token deaktivierter Firmen ablehnen

Security Audit #106:Commit cd7aaa9ce2 pushed by patrick

main

2026-10-31 15:25:08 +01:00

0s

docs: DEVLOG-Einträge ergänzt

Security Audit #105:Commit 80cee20fe5 pushed by patrick

main

2026-10-30 01:24:13 +01:00

0s

docs: Home-Assistant-Status in api.md

Security Audit #104:Commit c9f2725186 pushed by patrick

main

2026-10-29 23:23:55 +01:00

0s

feat(ha): read-only Arbeitszeit-Status für Home Assistant (Token-URL)

Security Audit #103:Commit ed5c52d8b3 pushed by patrick

main

2026-10-29 23:23:55 +01:00

0s

feat(frontend): Geräte-ID-QR für Ed25519-Kiosk + TLS-Warnung bei Bearer

Security Audit #102:Commit 0635bb5b8a pushed by patrick

main

2026-10-29 23:23:55 +01:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #101:Scheduled

main

2026-10-27 07:25:49 +01:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #100:Scheduled

main

2026-10-20 13:47:44 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #99:Scheduled

main

2026-10-13 13:32:26 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #98:Scheduled

main

2026-10-06 13:13:35 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #97:Scheduled

main

2026-09-29 13:01:31 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #96:Scheduled

main

2026-09-22 13:53:02 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #95:Scheduled

main

2026-09-15 12:37:21 +02:00

0s

fix(security): Audit-Nachzug – Rate-Limit, X-Real-IP-Vertrauen, Indizes

Security Audit #94:Commit 1d163cc299 pushed by patrick

main

2026-09-11 17:01:45 +02:00

0s

feat(time): kiosk_device_id an TimeEntry – dokumentiert Stempel-Standort

Security Audit #93:Commit 7873236de3 pushed by patrick

main

2026-09-11 17:01:44 +02:00

0s

feat(kiosk): QR-Login-Token-Endpunkt für Employee-App

Security Audit #92:Commit 71db3bdd57 pushed by patrick

main

2026-09-11 17:01:44 +02:00

0s

feat(frontend): Bearer-Kiosk-Gerät + QR-Code-Einrichtung im Portal

Security Audit #91:Commit 62a19d17e8 pushed by patrick

main

2026-09-11 13:55:24 +02:00

0s

feat(kiosk): Bearer-Geräte-Erstellung im Portal (für QR-Einrichtung)

Security Audit #90:Commit d80fc59f17 pushed by patrick

main

2026-09-11 13:55:24 +02:00

0s

feat(frontend): Kiosk-App-Download in ProfilePage (nur Admins)

Security Audit #89:Commit 3c427dcb15 pushed by patrick

main

2026-09-11 13:55:24 +02:00

0s

fix(cli): RLS-Refresh-Bug in kiosk add/rotate-key

Security Audit #88:Commit 370358d117 pushed by patrick

main

2026-09-11 13:55:23 +02:00

0s

fix(tests): RLS-Bypass + Refresh-Fehler in Bearer-Auth-Tests

Security Audit #87:Commit c15fe81498 pushed by patrick

main

2026-09-11 05:37:35 +02:00

0s