39 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lobo	af386bb8f7	feat(user): pick or turn off the dashboard banner	2026-09-24 15:35:48 +02:00
lobo	e04fd27b08	feat(user): synced appearance settings	2026-09-24 15:06:16 +02:00
lobo	c9ae7853e5	feat(profile): opt-in public profile with a ticket for Core ... user_settings.public_profile (off by default, needs a display name). GET /api/public/profiles/{displayName} answers only for enabled users with a public profile and returns a 10-minute EdDSA ticket for Core. A token with a typ claim is no login, so the ticket cannot be used as one.	2026-09-24 14:18:32 +02:00
lobo	779c4d296d	test: share one Postgres container across test classes ... The per-class container was stopped under the Spring context that the next integration test class reused, so health answered 503 there.	2026-09-24 14:18:32 +02:00
lobo	2941e3f905	feat(user): optional display name (player tag) ... users.display_name (V6), 3-24 letters, digits, space, _ . -, unique ignoring case. Set in settings (409 DISPLAY_NAME_ALREADY_IN_USE, also for the DB constraint race) and optionally at registration. Returned by /api/users/me.	2026-09-24 10:39:04 +02:00
lobo	4579b05d2c	fix(cors): expose Retry-After so the login page can show the block time	2026-09-24 10:29:57 +02:00
lobo	d28147b2ab	fix(security): hide health details and close Prometheus to the public ... /actuator/health showed database and disk details to anyone, and /actuator/prometheus was open. Only health stays public, as plain UP/DOWN for the Docker health check.	2026-09-24 10:26:53 +02:00
lobo	5512453774	fix(login): same error for every failed login, block disabled users, rate limit ... Unknown email, wrong password and disabled account now all return 401 INVALID_CREDENTIALS; unknown emails still run bcrypt against a dummy hash so timing does not leak them. After 5 failures per email or 20 per client IP, login returns 429 with Retry-After for 15 minutes. LoginRequest is now validated.	2026-09-24 10:22:30 +02:00
lobo	3d21bb667d	fix(db): remove the seeded test user from all environments ... V1 inserted test@example.com / password123 everywhere, including prod. V5 deletes that row only when email and seed hash both match.	2026-09-24 10:14:58 +02:00
lobo	fe691b0558	chore(deps): update Spring Boot to 4.1.1 and ArchUnit to 1.5.0	2026-09-24 08:56:45 +02:00
lobo	a3aeb666a8	fix(user): send Steam ID as string and refresh token on settings save ... JavaScript rounds 17-digit Steam IDs, so 76561198005679788 was stored as 76561198005679790. Steam IDs are now JSON strings (17 digits, numbers rejected), and null means "no Steam ID" instead of 0 (V4 migrates old rows). PUT /api/users/settings returns a new token, because Core reads the Steam ID from the token. A Steam ID owned by another user returns 409.	2026-09-24 08:51:01 +02:00
lobo	3159736c16	Merge pull request 'Changed from JWT token to public/privat key' (#2) from feat/jwt-eddsa into main ... Reviewed-on: #2	2026-05-12 08:58:57 +02:00
lobo	c312d271ad	Support now null as not initialized for SteamId	2026-04-19 14:59:27 +02:00
lobo	dda7e50963	Support now null as not initialized for SteamId	2026-04-19 14:35:02 +02:00
lobo	7d32c7e04a	Added new db migration to set default SteamId to	2026-04-19 14:17:49 +02:00
lobo	fd390ac072	Refactor package structure: domain -> modules ... Move domain packages into a new modules.* hierarchy and rename controller packages to api.* across login, registration, and user modules. Update package declarations and imports (including shared.api DTOs and JwtService -> modules login TokenGenerator), adjust tests and persistence/mapper paths accordingly, and apply minor formatting fixes (missing EOF newlines). This reorganizes the project to better separate API surface and module boundaries.	2026-04-19 12:50:01 +02:00
lobo	815347325a	Merge pull request 'feature-cleanup' (#1) from feature-cleanup into main ... Reviewed-on: #1	2026-04-18 11:52:46 +02:00
lobo	fabab0ca45	Fixed tests	2026-04-18 11:49:09 +02:00
lobo	0cd4d7328a	Fixed tests	2026-04-18 11:47:58 +02:00
lobo	d63fbd4155	Added new tests fixed some problem	2026-04-18 11:28:06 +02:00
lobo	3f80777e37	Fixed tests	2026-04-11 12:32:32 +02:00
lobo	e21dea1e18	Added lots of new stuff ... - extended the jwt and put userid into it - completed update settings - added settings also in me call	2026-04-11 12:07:27 +02:00
lobo	d498ef8827	Added transactional	2026-04-06 09:57:39 +02:00
lobo	ed98d703c6	changed default profile to prod	2026-04-06 09:35:31 +02:00
lobo	8465524849	Finished registration Process and added tests	2026-04-06 09:12:45 +02:00
lobo	c224cbf679	Started with: ... - Registration logic for new players - Extended User table with more information	2026-04-04 17:11:13 +02:00
lobo	dbc76e6158	Added tests for all services and controller	2026-04-04 16:01:05 +02:00
lobo	f4b7ae75a9	Added arch unit tests	2026-04-04 11:22:26 +02:00
lobo	5aee23f00e	Fixed problem with token response	2026-04-04 10:55:39 +02:00
lobo	71e4f38357	Cleaned a little bit up	2026-04-04 10:43:18 +02:00
lobo	41ce5d93e9	Implemented user service	2026-04-04 09:58:09 +02:00
lobo	8af7170c46	Disabled test for now until db config is ready for testing	2026-04-03 12:32:40 +02:00
lobo	64b84b1dc0	Added jwt token validation and api endpoint versioning	2026-04-03 12:25:03 +02:00
lobo	2e8ff1b079	Cleaned up the architecture	2026-04-03 11:35:53 +02:00
lobo	be4d4df351	Updated pipeline	2026-03-31 19:54:02 +02:00
lobo	85e4b62f32	Updated pipeline	2026-03-31 19:52:09 +02:00
lobo	7e8a04d83c	Login should work now, tests are missing	2026-03-31 19:48:23 +02:00
lobo	8dd17f84f6	Setup of springboot	2026-03-31 18:57:06 +02:00
lobo	a7c9364c7a	First commit	2026-03-31 18:20:40 +02:00