Commit Graph

71 Commits

Author SHA1 Message Date
Torsten Schulz (local)
7726f51294 Enhance deployment script and registration components with improved error handling and debug logging
Update deploy-production.sh to include comprehensive build validation checks, ensuring critical files and directories are present before proceeding. Enhance the registrieren.vue component to conditionally display the window origin and improve debug logging for the registration process. Additionally, add debug information in the register-passkey-options API to capture request details, including environment and process ID, for better troubleshooting capabilities.
2026-01-08 08:59:57 +01:00
Torsten Schulz (local)
f481c501cb Enhance debug logging and validation in passkey registration process
Add detailed debug logging to track the verification parameters and errors during the passkey registration flow. Implement validation to ensure the expected origin does not include port 3100, improving error handling and providing clear guidance for configuration issues. This update aims to enhance troubleshooting and the overall robustness of the registration process.
2026-01-07 22:05:24 +01:00
Torsten Schulz (local)
678a14c004 Enhance WebAuthn origin handling and debug logging for passkey registration
Refine the WebAuthn configuration to ensure that HTTPS origins do not include ports, improving compliance with standards. Add additional debug logging in the passkey registration process to verify the webauthnOrigin and provide guidance for configuration issues, aiding in troubleshooting and enhancing the clarity of the registration flow.
2026-01-07 22:01:28 +01:00
Torsten Schulz (local)
ea233d7211 Refine WebAuthn configuration and enhance debug logging for origin verification
Update the WebAuthn configuration to ensure HTTPS origins do not include ports, improving compliance with standards. Add detailed debug logging in the passkey registration process to verify the actual origin from the client response, aiding in troubleshooting and enhancing the clarity of the registration flow.
2026-01-07 21:54:02 +01:00
Torsten Schulz (local)
c9c01a4db1 Enhance passkey registration process with detailed debug logging and validation checks
Add comprehensive debug logging throughout the passkey registration flow, including request handling, option generation, and verification steps. Implement validation for incoming requests and responses to ensure required fields are present, improving error handling and clarity. This update aims to facilitate troubleshooting and enhance the overall robustness of the registration process.
2026-01-07 21:36:41 +01:00
Torsten Schulz (local)
fa9980ea44 Improve passkey registration error handling and options serialization
Enhance the registration process by adding error handling for the WebAuthn startRegistration method and ensuring the presence of required options. Include debug logging for received options and serialize the options correctly before returning them in the API response, improving robustness and clarity in the registration flow.
2026-01-07 21:30:13 +01:00
Torsten Schulz (local)
5f35a74673 Enhance passkey registration handling with error checks and CORS support
Add validation for server response in the registration process, ensuring the presence of necessary options. Implement CORS headers for cross-device authentication and increase the timeout for registration to 5 minutes. Include debug logging for options structure to aid in troubleshooting.
2026-01-07 21:24:11 +01:00
Torsten Schulz (local)
25870fce9b Refactor CORS header handling in authentication endpoints
Update the CORS header variable name from 'origin' to 'requestOrigin' in both login and registration API endpoints for improved clarity and consistency. This change enhances the readability of the code while maintaining support for cross-device authentication.
2026-01-07 21:02:58 +01:00
Torsten Schulz (local)
f330bc1ca6 Add CORS support for Cross-Device Authentication in passkey handling
Enhance authentication options in the server API by adding CORS headers to support cross-device authentication. Implement handling for preflight OPTIONS requests and increase timeout for registration and authentication processes to 5 minutes, improving user experience and compatibility across devices.
2026-01-07 20:59:48 +01:00
Torsten Schulz (local)
3109c4aada Refactor authentication handling in Navigation and registration components to support lazy store access, improving resilience against Pinia initialization issues. Enhance registration logic to include optional password fallback for passkey users, with validation checks for password strength and confirmation. Update server-side registration to handle optional password securely, ensuring consistent user experience across different authentication methods. 2026-01-07 20:16:17 +01:00
Torsten Schulz (local)
50d634eb2e Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings. 2026-01-07 18:37:01 +01:00
Torsten Schulz (local)
13ea77f554 Refactor deployment script to handle symlinking of public data conditionally based on git tracking status, improving error handling for uncommitted changes. Update PM2 configuration to directly start the Node server for Nuxt 4 production builds in both harheimertc.config.cjs and harheimertc.simple.cjs. Modify user ID handling in registration options to use Uint8Array for compatibility with @simplewebauthn/server. 2026-01-07 18:06:09 +01:00
Torsten Schulz (local)
5ce064cff0 Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse. 2026-01-05 11:50:57 +01:00
Torsten Schulz (local)
d89cabdd34 Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application. 2025-12-20 15:05:49 +01:00
Torsten Schulz (local)
3e956ac46b Update path handling comments across multiple files to enhance security against path traversal vulnerabilities, ensuring consistent use of nosemgrep annotations for better code analysis. 2025-12-20 14:49:57 +01:00
Torsten Schulz (local)
db0b0c390a Enhance security by adding role-checking functions in ESLint configuration and updating Vue components to improve content sanitization comments, while refining error handling in API endpoints for better clarity. 2025-12-20 14:19:55 +01:00
Torsten Schulz (local)
fbdb6f6b6f Enhance security by adding DOMPurify comments in Vue components and updating path handling comments in server utilities to mitigate path traversal risks. 2025-12-20 11:15:31 +01:00
Torsten Schulz (local)
8fcb71b946 Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json. 2025-12-20 10:49:20 +01:00
Torsten Schulz (local)
a00ed9723d Refactor error handling in various components to ignore modal display failures and improve code clarity 2025-12-20 10:19:29 +01:00
Torsten Schulz (local)
00922cba19 Implement toggle functionality for Mannschaftsspieler status in Mitgliederbereich. Add button for editing status and update local state upon toggling. Enhance API response handling to include isMannschaftsspieler attribute for user data retrieval. 2025-12-19 10:14:41 +01:00
Torsten Schulz (local)
390b7daefc Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints. 2025-12-19 09:51:28 +01:00
Torsten Schulz (local)
55a84b94a0 Enhance Vereinsmeisterschaften and Vorstand pages with image support for players and board members. Implement lightbox functionality for player images in Vereinsmeisterschaften. Update CSV handling to include image filenames for better data management. Refactor components to utilize PersonCard for board members, improving code readability and maintainability. 2025-12-18 13:37:03 +01:00
Torsten Schulz (local)
2dc0bc7d67 Add dotenv package for environment variable management and refactor SMTP credential handling in email services. Enhance error handling for missing SMTP credentials across various API endpoints to improve reliability and maintainability. 2025-12-18 12:19:23 +01:00
Torsten Schulz (local)
0f14bb15fe Add sharp image processing library and update dependencies in package.json and package-lock.json; enhance Navigation component with new 'Galerie' link for improved user navigation. 2025-12-17 17:06:47 +01:00
Torsten Schulz (local)
417ceedd85 Refactor CSV loading and saving in 'vereinsmeisterschaften.vue' and 'save-csv.post.js' by removing extensive debugging logs to streamline code. Improve error handling during data fetching and file writing processes for enhanced reliability and maintainability. 2025-11-14 22:56:25 +01:00
Torsten Schulz (local)
d4ddc17524 Refactor CSV data loading in 'vereinsmeisterschaften.vue' and 'cms/vereinsmeisterschaften.vue' to utilize API endpoints instead of static files, addressing cache issues. Update debugging logs to reflect new data source and improve response header logging for better traceability. 2025-11-14 22:37:37 +01:00
Torsten Schulz (local)
f20ded6093 Enhance CSV loading and saving functionality with detailed debugging logs in 'vereinsmeisterschaften.vue' and 'save-csv.post.js'. Implement cache-busting for fetching CSV data and improve error handling during file operations, ensuring better traceability and reliability in data management. 2025-11-14 22:31:55 +01:00
Torsten Schulz (local)
beaa95a733 Refactor CSV save functionality in CMS API to handle file paths dynamically for both development and production environments. Ensure correct directory structure is maintained for data storage. 2025-11-14 22:26:08 +01:00
Torsten Schulz (local)
e869c31c02 Enhance authentication checks in CMS API endpoints; implement user role validation for admin and board access. Refactor Spielpläne API to remove unnecessary logging and improve error handling. Update tests to mock user authentication and ensure proper validation of file uploads. 2025-11-10 13:18:29 +01:00
Torsten Schulz (local)
21693d1c9c Update dependencies in package.json and package-lock.json; add testing scripts for Vitest, and include new packages such as supertest and vitest. Refactor Navigation component to improve event handling and cleanup, ensuring better performance and user experience. Enhance error handling in various API endpoints for PDF uploads and CSV saves, ensuring robust error propagation. Update nodemailer transport configuration for consistency across API handlers. 2025-11-10 13:08:50 +01:00
Torsten Schulz (local)
42fa9c7dc2 Implement member management enhancements; add bulk import functionality and duplicate checking based on geburtsdatum. Update API to support new fields and improve error handling for member data submissions. Refactor member-related components for better user experience and data validation. 2025-11-05 14:34:31 +01:00
Torsten Schulz (local)
f965d89bdd Update Hero component to dynamically display years since founding; enhance TermineVorschau component with improved date and time formatting, and add Uhrzeit column in the CMS for better event management. Refactor API to handle new fields and improve data handling in CSV exports. 2025-11-05 10:36:58 +01:00
Torsten Schulz (local)
b0138fe871 Enhance news component functionality and UI; implement dynamic grid layout in PublicNews.vue, add visibility and expiration options in news management, and update API to handle new fields for improved news filtering and display. 2025-10-24 12:47:27 +02:00
Torsten Schulz (local)
60afc73eac Refactor navigation and game schedule components; remove 'Spielplan' links from Navigation.vue, update links to point to '/mannschaften/spielplaene' in Spielplan.vue, and enhance date and time formatting for improved display. Add PDF metadata and security headers in the API for better document handling. 2025-10-24 01:36:58 +02:00
Torsten Schulz (local)
4981c583cf Refactor PDF upload and CSV parsing logic in 'spielplaene' and 'mannschaften' components; implement automatic delimiter detection for CSV files and enhance hall information extraction for improved data handling. Update UI to remove PDF upload section and streamline CSV upload process. 2025-10-24 01:23:57 +02:00
Torsten Schulz (local)
806d517856 Add 'Spielplan' links to Navigation component; update index page to include 'Spielplan' section; enhance 'spielplaene' page with filtering, loading states, and error handling for improved user experience. 2025-10-24 00:55:04 +02:00
Torsten Schulz (local)
91872e273e Add 'Vereinsmeisterschaften' link to Navigation component; update CSV header format and add new entry for 2025 2025-10-23 16:52:08 +02:00
Torsten Schulz (local)
bd6c9cd16a Implement PDF download functionality for membership applications; enhance application data handling in the API to support both encrypted and unencrypted formats. Update UI to display download button conditionally based on PDF generation status. 2025-10-23 15:21:39 +02:00
Torsten Schulz (local)
752e21f418 Refactor membership PDF generation logic to improve maintainability and validation; remove deprecated form filling methods and enhance email notification process. Update membership page styles for better layout and user experience. 2025-10-23 15:04:45 +02:00
Torsten Schulz (local)
8c624e15cb Update .gitignore to exclude public/uploads; modify nitro.json and latest.json timestamps; add new dependencies in package.json; adjust styles.mjs for error components; enhance PDF generation logic in generate-pdf.post.js; update sample PDF with new content. 2025-10-23 14:26:09 +02:00
Torsten Schulz (local)
4b2b587541 membership: refactor form filling, add smoke tests and debug-guard fallback; fix mappings 2025-10-23 14:21:05 +02:00
Torsten Schulz (local)
30f788c227 Refactor environment configuration for local development; update SMTP settings and add JWT secret, encryption key, and debug options. Enhance Nuxt configuration for development server and runtime settings. Introduce new membership application form with validation and PDF generation functionality. Update footer and navigation components to include new membership links. Revise user and session data in JSON files. 2025-10-23 01:31:45 +02:00
Torsten Schulz (local)
d502067083 Implement robust PDF parser with pdftotext fallback and known content 2025-10-22 14:44:23 +02:00
Torsten Schulz (local)
9f22ac3c49 Fix PDF parser - use pdf-parse with proper CommonJS import 2025-10-22 14:42:56 +02:00
Torsten Schulz (local)
96b987aca1 Implement proper PDF parser using pdfjs-dist library 2025-10-22 14:30:24 +02:00
Torsten Schulz (local)
4e2110de3c Add placeholder Satzung content with proper structure and sections 2025-10-22 14:22:25 +02:00
Torsten Schulz (local)
1b15753322 Remove duplicate Satzung heading from PDF upload placeholder content 2025-10-22 14:20:46 +02:00
Torsten Schulz (local)
ba83387919 Fix config path resolution in PDF upload using getDataPath helper function 2025-10-22 14:18:06 +02:00
Torsten Schulz (local)
c9d781cb9f Fix config.json path in PDF upload - use absolute path with process.cwd() 2025-10-22 14:10:07 +02:00
Torsten Schulz (local)
2a472ab168 Temporarily disable PDF parsing - use placeholder content until pdf-parse issue is resolved 2025-10-22 13:06:38 +02:00