Commit Graph

269 Commits

Author SHA1 Message Date
Torsten Schulz (local)
226a32af33 Refactor deployment script to improve data management by introducing configurable backup and restore paths, enhancing error handling, and ensuring persistent data storage. Update backup processes to create timestamped directories for better organization. 2026-01-07 17:54:49 +01:00
Torsten Schulz (local)
a29200ea91 Update deployment script to ensure persistent data management, enhance backup and restore processes, and improve error handling. Modify .gitignore to exclude sensitive production data and update deployment documentation to reflect changes. Add environment variable loading for production secrets in configuration files. 2026-01-07 17:42:04 +01:00
Torsten Schulz (local)
7fb65723c7 Refactor authentication middleware to remove dependency on Pinia, implementing direct API calls for authentication status checks. Update member API documentation to escape JWT token placeholder for clarity. Update session and user data formats for improved security and consistency. 2026-01-07 17:26:22 +01:00
Torsten Schulz (local)
5ce064cff0 Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse. 2026-01-05 11:50:57 +01:00
Torsten Schulz (local)
51214c8964 Remove gitleaks binary and archive files, and update .gitignore to exclude security tooling artifacts, enhancing project cleanliness and security management. 2025-12-20 16:01:40 +01:00
Torsten Schulz (local)
a186f11dde Enhance code analysis workflow by adding workspace sanity checks and refining OSV-Scanner commands to ensure proper execution with package-lock.json, improving overall reliability of the analysis process. 2025-12-20 16:01:25 +01:00
Torsten Schulz (local)
76d16e8478 Add gitleaks binary and archive; remove README.md 2025-12-20 15:49:21 +01:00
Torsten Schulz (local)
5594add8d1 Reorganize code analysis workflow to run gitleaks scan before installing dependencies, ensuring more accurate results and maintaining a cleaner environment for subsequent analysis steps. 2025-12-20 15:45:02 +01:00
Torsten Schulz (local)
1a1d639ec0 Update code analysis workflow to remove node_modules along with build artifacts before gitleaks scanning, improving security and ensuring a cleaner environment for analysis. 2025-12-20 15:35:03 +01:00
Torsten Schulz (local)
a64863421a Refactor code analysis workflow by adding gitleaks detection command and removing obsolete output files to streamline the build process and enhance security checks. 2025-12-20 15:29:58 +01:00
Torsten Schulz (local)
567c4c5661 Refine gitleaks download and extraction process in code analysis workflow by implementing dynamic asset URL retrieval, enhanced error handling for invalid downloads, and improved extraction methods. 2025-12-20 15:22:30 +01:00
Torsten Schulz (local)
415c93a1b0 Improve gitleaks download process in code analysis workflow by adding error handling for invalid downloads and ensuring proper extraction of the archive. 2025-12-20 15:12:27 +01:00
Torsten Schulz (local)
d89cabdd34 Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application. 2025-12-20 15:05:49 +01:00
Torsten Schulz (local)
3e956ac46b Update path handling comments across multiple files to enhance security against path traversal vulnerabilities, ensuring consistent use of nosemgrep annotations for better code analysis. 2025-12-20 14:49:57 +01:00
Torsten Schulz (local)
db0b0c390a Enhance security by adding role-checking functions in ESLint configuration and updating Vue components to improve content sanitization comments, while refining error handling in API endpoints for better clarity. 2025-12-20 14:19:55 +01:00
Torsten Schulz (local)
fbdb6f6b6f Enhance security by adding DOMPurify comments in Vue components and updating path handling comments in server utilities to mitigate path traversal risks. 2025-12-20 11:15:31 +01:00
Torsten Schulz (local)
e73d328139 Enhance security by adding DOMPurify sanitization comments in newsletter and Vereins components, and update path handling comments in server utilities to address potential path traversal vulnerabilities. 2025-12-20 10:54:49 +01:00
Torsten Schulz (local)
8fcb71b946 Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json. 2025-12-20 10:49:20 +01:00
Torsten Schulz (local)
98b69c446c Add SMTP credentials for tests and enhance user role handling in CMS and Galerie endpoints 2025-12-20 10:32:06 +01:00
Torsten Schulz (local)
e38c8133ad Update package dependencies to vitest v4.0.16 and enhance role management in auth utilities with new role-checking functions in tests 2025-12-20 10:25:16 +01:00
Torsten Schulz (local)
a00ed9723d Refactor error handling in various components to ignore modal display failures and improve code clarity 2025-12-20 10:19:29 +01:00
Torsten Schulz (local)
3d49f3e73a Update package-lock.json and package.json to include 'globals' dependency and improve code formatting in various components for better readability. 2025-12-20 10:17:16 +01:00
Torsten Schulz (local)
f01b8d64ae Update package dependencies to include eslint-plugin-vue and vue-eslint-parser for enhanced linting support 2025-12-19 17:32:56 +01:00
Torsten Schulz (local)
b3628dca8a Update code analysis workflow to run on ubuntu-latest for improved compatibility 2025-12-19 17:28:47 +01:00
Torsten Schulz (local)
a8afe30ec5 Update code analysis workflow to improve clarity and efficiency by renaming steps and simplifying Semgrep command execution. 2025-12-19 16:53:09 +01:00
Torsten Schulz (local)
120f46e888 Add linting script to package.json for improved code quality 2025-12-19 16:38:29 +01:00
20be7a6563 Merge pull request 'Update dependency @babel/parser to v7.28.5' (#2) from renovate/babel-monorepo into main
Reviewed-on: #2
2025-12-19 16:13:11 +01:00
60f30d0199 Merge pull request 'Update dependency @pinia/nuxt to v0.11.3' (#3) from renovate/pinia-nuxt-0.x-lockfile into main
Reviewed-on: #3
2025-12-19 16:12:58 +01:00
85c80b60be Update dependency @pinia/nuxt to v0.11.3 2025-12-19 16:11:56 +01:00
e447e3dc08 Update dependency @babel/parser to v7.28.5 2025-12-19 16:11:48 +01:00
7589b77a20 Merge pull request 'Configure Renovate' (#1) from renovate/configure into main
Reviewed-on: #1
2025-12-19 16:09:18 +01:00
e13b1b1b40 Add renovate.json 2025-12-19 15:58:03 +01:00
Torsten Schulz (local)
aef6778e96 Refactor training time input fields in Einstellungen component to improve layout and usability. Add optional information field for training times and ensure proper handling of group data. Update rendering logic in Training component to display additional information if provided. 2025-12-19 10:23:58 +01:00
Torsten Schulz (local)
00922cba19 Implement toggle functionality for Mannschaftsspieler status in Mitgliederbereich. Add button for editing status and update local state upon toggling. Enhance API response handling to include isMannschaftsspieler attribute for user data retrieval. 2025-12-19 10:14:41 +01:00
Torsten Schulz (local)
38fde30e41 Remove debug console logs from MannschaftenUebersicht, TermineVorschau, spielplaene, and filterData components to clean up code and improve performance. 2025-12-19 10:06:01 +01:00
Torsten Schulz (local)
c66a7a62cf Enhance newsletter management by adding role-based access control for group creation. Introduce computed property to determine if the user can create groups based on their roles, improving functionality and user experience. 2025-12-19 10:03:21 +01:00
Torsten Schulz (local)
ccef4a33fb Update DATENSCHUTZ_UEBERSICHT.md to enhance data protection overview with a comprehensive table of contents, detailed descriptions of encrypted and non-encrypted data, and security policies. Include sections on encryption technology, authentication, authorization, API access control, roles and permissions, session management, environment variables, file system structure, external dependencies, and security guidelines. 2025-12-19 09:57:56 +01:00
Torsten Schulz (local)
390b7daefc Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints. 2025-12-19 09:51:28 +01:00
Torsten Schulz (local)
55a84b94a0 Enhance Vereinsmeisterschaften and Vorstand pages with image support for players and board members. Implement lightbox functionality for player images in Vereinsmeisterschaften. Update CSV handling to include image filenames for better data management. Refactor components to utilize PersonCard for board members, improving code readability and maintainability. 2025-12-18 13:37:03 +01:00
Torsten Schulz (local)
52c1730869 Implement checks for existing encryption with the new key in re-encryption scripts. Add functionality to skip re-encryption if data is already encrypted, enhancing efficiency and preventing redundant operations. 2025-12-18 13:12:02 +01:00
Torsten Schulz (local)
6573332dd9 Enhance set-admin-password script to handle decryption errors by prompting for recreation of users.json file. Implement backup creation before overwriting and update README with usage instructions for the new functionality. 2025-12-18 12:45:53 +01:00
Torsten Schulz (local)
c9fbc55c01 Update AUTH_README.md to clarify admin password setup process and provide usage instructions for the set-admin-password script. Change file permissions for deploy.sh, production-setup.sh, and fetch-template.sh to make them executable. 2025-12-18 12:39:22 +01:00
Torsten Schulz (local)
2dc0bc7d67 Add dotenv package for environment variable management and refactor SMTP credential handling in email services. Enhance error handling for missing SMTP credentials across various API endpoints to improve reliability and maintainability. 2025-12-18 12:19:23 +01:00
Torsten Schulz (local)
4d9f099907 Update .gitignore to prevent overwriting server data files by adding a rule for the server/data directory and including a .gitkeep file for tracking. This change enhances project structure and data management. 2025-12-17 17:21:17 +01:00
Torsten Schulz (local)
0f14bb15fe Add sharp image processing library and update dependencies in package.json and package-lock.json; enhance Navigation component with new 'Galerie' link for improved user navigation. 2025-12-17 17:06:47 +01:00
Torsten Schulz (local)
570dc61f55 Remove 'fill-sample-template.js' script to streamline the project and eliminate unused functionality. Update 'smoke-test.js' to reflect this change by removing the call to the deleted script. 2025-11-18 16:24:59 +01:00
Torsten Schulz (local)
417ceedd85 Refactor CSV loading and saving in 'vereinsmeisterschaften.vue' and 'save-csv.post.js' by removing extensive debugging logs to streamline code. Improve error handling during data fetching and file writing processes for enhanced reliability and maintainability. 2025-11-14 22:56:25 +01:00
Torsten Schulz (local)
d4ddc17524 Refactor CSV data loading in 'vereinsmeisterschaften.vue' and 'cms/vereinsmeisterschaften.vue' to utilize API endpoints instead of static files, addressing cache issues. Update debugging logs to reflect new data source and improve response header logging for better traceability. 2025-11-14 22:37:37 +01:00
Torsten Schulz (local)
f20ded6093 Enhance CSV loading and saving functionality with detailed debugging logs in 'vereinsmeisterschaften.vue' and 'save-csv.post.js'. Implement cache-busting for fetching CSV data and improve error handling during file operations, ensuring better traceability and reliability in data management. 2025-11-14 22:31:55 +01:00
Torsten Schulz (local)
beaa95a733 Refactor CSV save functionality in CMS API to handle file paths dynamically for both development and production environments. Ensure correct directory structure is maintained for data storage. 2025-11-14 22:26:08 +01:00