Torsten Schulz (local) 5074e8f8f8 fix(security): centralize data path validation in getServerDataPath; enforce segment whitelist and resolved-path check

2026-05-27 19:53:59 +02:00

.gitea/workflows

test: expand endpoint coverage and harden deploy gate

2026-05-21 08:03:59 +02:00

.github/workflows

feat(android): initial project setup with Gradle, AndroidManifest, and MainActivity

2026-05-26 16:39:10 +02:00

android-app

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

assets

Initial commit: Harheimer TC Website

2025-10-21 00:41:12 +02:00

backups/users-1766060412221

Enhance Vereinsmeisterschaften and Vorstand pages with image support for players and board members. Implement lightbox functionality for player images in Vereinsmeisterschaften. Update CSV handling to include image filenames for better data management. Refactor components to utilize PersonCard for board members, improving code readability and maintainability.

2025-12-18 13:37:03 +01:00

components

feat(auth): implement token rotation and session management for persistent Android login

2026-05-27 18:55:22 +02:00

composables

Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json.

2025-12-20 10:49:20 +01:00

middleware

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

pages

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

public

Enhance fillable template generation by adding logo and refactoring header drawing

2026-05-12 23:25:28 +02:00

scripts

fix(import): publish season spielplan json after import

2026-05-20 18:12:32 +02:00

server

fix(security): centralize data path validation in getServerDataPath; enforce segment whitelist and resolved-path check

2026-05-27 19:53:59 +02:00

stores

Implement passkey login functionality and enhance passkey support checks

2026-05-15 13:20:09 +02:00

temp

Refactor code structure for improved readability and maintainability

2026-05-20 10:52:28 +02:00

tests

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

.codex

Update commander dependency to version 13.1.0 in package.json and package-lock.json for improved functionality and compatibility.

2026-04-15 21:18:26 +02:00

.gitignore

Android-Cleanup und build fix

2026-05-27 18:12:10 +02:00

.nvmrc

Enhance deploy-production.sh with new functions for Node.js version management and public document synchronization. Added checks for Node.js version requirements and improved error handling for document syncing. Updated package.json and package-lock.json to specify Node.js and npm engine requirements.

2026-04-15 21:51:08 +02:00

.semgrepignore

Enhance security by adding DOMPurify comments in Vue components and updating path handling comments in server utilities to mitigate path traversal risks.

2025-12-20 11:15:31 +01:00

ANDROID_ARCHITECTURE.md

feat(android): initial project setup with Gradle, AndroidManifest, and MainActivity

2026-05-26 16:39:10 +02:00

ANDROID_KOTLIN_PLAN.md

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

ANDROID_PORT_TODO.md

feat(android): initial project setup with Gradle, AndroidManifest, and MainActivity

2026-05-26 16:39:10 +02:00

ANDROID_REPO_ENDPOINTS.md

feat(android): initial project setup with Gradle, AndroidManifest, and MainActivity

2026-05-26 16:39:10 +02:00

apache-config.conf

Simplify Apache config to proxy all requests to Nuxt server

2025-10-21 09:06:07 +02:00

apache-ssl-config.conf

Update security headers in Apache configuration to enhance protection

2026-01-11 20:59:42 +01:00

apache-static.conf

Update security headers in Apache configuration to enhance protection

2026-01-11 20:59:42 +01:00

app.vue

Refactor error and confirmation handling in membership application management; replace alerts with modal dialogs for improved user experience. Update application status to 'approved' for a new member and add corresponding data to JSON files.

2025-10-23 15:32:20 +02:00

AUTH_README.md

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

DATENSCHUTZ_UEBERSICHT.md

Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings.

2026-01-07 18:37:01 +01:00

DATENSCHUTZ.md

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

deploy-production.sh

Add dependency installation check and logging to deploy script

2026-05-06 15:58:02 +02:00

deploy-test.sh

Update package version to 1.1.6 and enhance deploy script with dependency checks

2026-05-06 16:03:16 +02:00

deploy.sh

Update AUTH_README.md to clarify admin password setup process and provide usage instructions for the set-admin-password script. Change file permissions for deploy.sh, production-setup.sh, and fetch-template.sh to make them executable.

2025-12-18 12:39:22 +01:00

DEPLOYMENT.md

Update deployment script to ensure persistent data management, enhance backup and restore processes, and improve error handling. Modify .gitignore to exclude sensitive production data and update deployment documentation to reflect changes. Add environment variable loading for production secrets in configuration files.

2026-01-07 17:42:04 +01:00

env.example

Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings.

2026-01-07 18:37:01 +01:00

eslint.config.js

Enhance ESLint configuration to include support for .mjs and .cjs file types. Update ignored files patterns to ensure proper linting of project files. Refactor Vue component templates for improved readability and maintainability, including consistent formatting and structure across various components. Update error handling in save functions to prevent silent failures.

2026-04-15 20:37:14 +02:00

harheimertc.config.cjs

Refactor PM2 instance management in deployment script and enhance configuration for multiple instances

2026-01-17 18:46:15 +01:00

harheimertc.simple.cjs

Refactor deployment script to handle symlinking of public data conditionally based on git tracking status, improving error handling for uncommitted changes. Update PM2 configuration to directly start the Node server for Nuxt 4 production builds in both harheimertc.config.cjs and harheimertc.simple.cjs. Modify user ID handling in registration options to use Uint8Array for compatibility with @simplewebauthn/server.

2026-01-07 18:06:09 +01:00

harheimertc.test.config.cjs

Enhance deploy-test.sh with functions for Node.js version management, dependency installation, and public document synchronization. Implement checks for Node.js version requirements and improve error handling for document syncing. Update environment configuration in harheimertc.test.config.cjs to support development and test environments. Modify email recipient logic in contact and email service APIs to prevent notifications in test environments. Add tests to verify behavior in test conditions.

2026-04-16 13:06:14 +02:00

index.htm

Remove index-iframe.html file, eliminating the iframe integration for the Harheimer Tischtennis-Club website. This change simplifies the project structure by removing unused HTML content.

2025-11-07 10:20:05 +01:00

next-env.d.ts

Initial commit: Harheimer TC Website

2025-10-21 00:41:12 +02:00

nuxt.config.js

Add dependency installation check and logging to deploy script

2026-05-06 15:58:02 +02:00

package-lock.json

fix(package): update qs to version 6.15.2

2026-05-27 18:23:16 +02:00

package.json

feat(auth): implement token rotation and session management for persistent Android login

2026-05-27 18:55:22 +02:00

production-setup.sh

Update AUTH_README.md to clarify admin password setup process and provide usage instructions for the set-admin-password script. Change file permissions for deploy.sh, production-setup.sh, and fetch-template.sh to make them executable.

2025-12-18 12:39:22 +01:00

renovate.json

Add renovate.json

2025-12-19 15:58:03 +01:00

tailwind.config.js

Initial commit: Harheimer TC Website

2025-10-21 00:41:12 +02:00

test-vspace.tex

Refactor environment configuration for local development; update SMTP settings and add JWT secret, encryption key, and debug options. Enhance Nuxt configuration for development server and runtime settings. Introduce new membership application form with validation and PDF generation functionality. Update footer and navigation components to include new membership links. Revise user and session data in JSON files.

2025-10-23 01:31:45 +02:00

test.aux

Refactor environment configuration for local development; update SMTP settings and add JWT secret, encryption key, and debug options. Enhance Nuxt configuration for development server and runtime settings. Introduce new membership application form with validation and PDF generation functionality. Update footer and navigation components to include new membership links. Revise user and session data in JSON files.

2025-10-23 01:31:45 +02:00

test.pdf

Refactor environment configuration for local development; update SMTP settings and add JWT secret, encryption key, and debug options. Enhance Nuxt configuration for development server and runtime settings. Introduce new membership application form with validation and PDF generation functionality. Update footer and navigation components to include new membership links. Revise user and session data in JSON files.

2025-10-23 01:31:45 +02:00

test.tex

Refactor environment configuration for local development; update SMTP settings and add JWT secret, encryption key, and debug options. Enhance Nuxt configuration for development server and runtime settings. Introduce new membership application form with validation and PDF generation functionality. Update footer and navigation components to include new membership links. Revise user and session data in JSON files.

2025-10-23 01:31:45 +02:00

vitest.config.ts

Update dependencies in package.json and package-lock.json; add testing scripts for Vitest, and include new packages such as supertest and vitest. Refactor Navigation component to improve event handling and cleanup, ensuring better performance and user experience. Enhance error handling in various API endpoints for PDF uploads and CSV saves, ensuring robust error propagation. Update nodemailer transport configuration for consistency across API handlers.

2025-11-10 13:08:50 +01:00

Description

No description provided

508 MiB

Languages

Vue 34.2%

JavaScript 29.1%

Kotlin 28.9%

TypeScript 5.7%

Shell 2%