-
8fd94736a8
v2: ⚠️ КОСТЫЛЬ /v2/test — вход с TEST_TOKEN (WZ01112) в обход Keycloak
cairnr01probe
2026-06-12 17:37:32 +04:00
-
e8bf24d1c9
v2: версия 0.5.70 — отображается в /v2 и /v2/app
cairnr01probe
2026-06-12 17:08:46 +04:00
-
2ee54fd997
v2: schema создаётся внутри v2, основной server.js не трогаем
cairnr01probe
2026-06-12 17:05:48 +04:00
-
65ca65fd84
v2: отдельный модуль schema.js — автосоздание таблиц при старте
cairnr01probe
2026-06-12 17:04:25 +04:00
-
d2c20c4142
v2: CRUD-модуль — /v2/app с выбором компании, добавление/изменение/удаление записей
cairnr01probe
2026-06-12 16:53:33 +04:00
-
00690881e0
v2: документирован конфиг — тестовый KC vs production, инструкция перехода
cairnr01probe
2026-06-12 16:43:20 +04:00
-
9795902049
v2: убран JWT fallback — IAM обязателен, нет IAM = ошибка
cairnr01probe
2026-06-12 16:41:39 +04:00
-
1b6df63945
v2: IAM fallback — JWT claims если IAM недоступен
cairnr01probe
2026-06-12 16:31:18 +04:00
-
4ae695f026
v2: детальное логирование postForm + exchangeCode
cairnr01probe
2026-06-12 16:26:17 +04:00
-
08d25831a4
v2: отладка exchangeCode — логируем ответ Keycloak
cairnr01probe
2026-06-12 16:08:10 +04:00
-
f97d57bafd
v2: конфиг — process.env с умолчаниями, без dotenv и .env
cairnr01probe
2026-06-12 16:00:34 +04:00
-
5821020aaa
v2: хардкод конфиг — без env, без V2_*, без .env
cairnr01probe
2026-06-12 15:59:25 +04:00
-
b25199d386
v2: изоляция — свои V2_* env, v2/.env, не трогает основные переменные
cairnr01probe
2026-06-12 15:58:17 +04:00
-
8e225e1e10
v2: модуль аутентификации Keycloak + IAM, роутер /v2
cairnr01probe
2026-06-12 15:47:32 +04:00
-
b2f1cae37d
docs: session history 2026-06-11 with remaining tasks
cairnr01probe
2026-06-12 13:43:25 +04:00
-
2993f95b8d
tz
cairnr01probe
2026-06-11 21:38:19 +04:00
-
199585be67
docs: add actual TOR (ТЗ-факт) based on implemented features
cairnr01probe
2026-06-11 21:36:40 +04:00
-
f818f454a3
fix: deleted entries shown with strikethrough + opacity, edit/delete hidden
cairnr01probe
2026-06-11 21:26:05 +04:00
-
bc209aeab8
release: bump 0.5.57
cairnr01probe
2026-06-11 21:15:45 +04:00
-
a601570a4a
fix: return includeDeleted checkbox + submit button for admin filter (no JS)
cairnr01probe
2026-06-11 21:07:59 +04:00
-
5781b37882
fix: audit table has impersonated_by column + filter uses button submit (no JS)
cairnr01probe
2026-06-11 20:47:03 +04:00
-
ffdc12bdf8
fix: syntax error in /debug-session — missing closing brace
cairnr01probe
2026-06-11 20:39:30 +04:00
-
001db2a556
debug: /debug-session shows last audit log entries (impersonated_by)
cairnr01probe
2026-06-11 20:32:23 +04:00
-
447acba762
fix: impersonation banner shows activeClientId instead of raw JWT clientId
cairnr01probe
2026-06-11 20:27:08 +04:00
-
8f9e0a96ad
fix: reject client_id when allowedIds list is empty (no IAM, no JWT claims)
cairnr01probe
2026-06-11 20:18:55 +04:00
-
68ea44a81d
fix: X-Imp-* headers bridge UI→API impersonation + timezone GMT+4
cairnr01probe
2026-06-11 20:17:07 +04:00
-
d0a0fdc264
chore: exclude sonnet analysis files from git
cairnr01probe
2026-06-11 20:03:08 +04:00
-
1350f0dbba
security: fix OIDC state check bypass + open redirect in login-token
cairnr01probe
2026-06-11 20:02:49 +04:00
-
351cb6afe6
feat: test impersonation via IMPERSONATION_ORIGINAL/TARGET/COMPANY env vars
cairnr01probe
2026-06-11 19:25:11 +04:00
-
e0cbf4bf35
fix: /export defaults to JSON, ?format=txt for plain text
cairnr01probe
2026-06-11 16:32:19 +04:00
-
e3c4c738aa
feat: /export?format=json — JSON export for admin
cairnr01probe
2026-06-11 16:29:24 +04:00
-
3bc285dc93
fix: /export only for adminMode users, not public
cairnr01probe
2026-06-11 16:28:15 +04:00
-
6025d84959
fix: add ALTER TABLE migration for impersonated_by column
cairnr01probe
2026-06-11 16:20:52 +04:00
-
7758d70dcf
feat: double audit — impersonated_by in audit_log
cairnr01probe
2026-06-11 16:10:41 +04:00
-
9c51e449ab
fix: remove canWrite from IAM — it is IAM RBAC, not our app logic
cairnr01probe
2026-06-11 16:01:55 +04:00
-
9a331eec82
feat: full IAM impersonation support — read-only + original user + canWrite
cairnr01probe
2026-06-11 15:54:56 +04:00
-
a2cfd2c10f
feat: IAM impersonation support — isImpersonated flag + banner
cairnr01probe
2026-06-11 15:34:19 +04:00
-
7b3dd8b4b3
fix: всегда показывать email залогиненного, не owner_email компании
cairnr01probe
2026-06-11 15:16:59 +04:00
-
ce6b67e72a
fix: email from session.user first, not JWT payload
cairnr01probe
2026-06-11 15:08:07 +04:00
-
9cb53df8b1
fix: toggle as pure HTML form — no JS, no fetch, just POST+redirect
cairnr01probe
2026-06-11 14:59:59 +04:00
-
fa4d5646fa
fix: toggle now works — JSON response + immediate CSS flip
cairnr01probe
2026-06-11 14:42:31 +04:00
-
f739754c3b
fix: pass canAdminMode to render + bump 0.5.47
cairnr01probe
2026-06-11 14:34:42 +04:00
-
cad6ebb4d6
release: bump 0.5.46
cairnr01probe
2026-06-11 14:24:46 +04:00
-
8b891a4bed
fix: remove duplicate catch block causing startup crash
cairnr01probe
2026-06-11 14:19:01 +04:00
-
08248229b9
fix: если email мой — isAdmin = true, canAdminMode = true
cairnr01probe
2026-06-11 14:10:52 +04:00
-
2fbdc3259b
hardcode: canAdminMode для ntazetdinov@nubes.ru без зависимостей
cairnr01probe
2026-06-11 14:10:00 +04:00
-
d54a72ca2c
debug: add resolveUser logging for canAdminMode diagnosis
cairnr01probe
2026-06-11 14:04:36 +04:00
-
4af34616f9
fix: canAdminMode по email ntazetdinov@nubes.ru вместо isAdmin
cairnr01probe
2026-06-11 13:41:35 +04:00
-
13466ebd37
simplify: toggle adminMode, canAdminMode flag, remove getOrCreateCompany fallback
cairnr01probe
2026-06-11 13:15:37 +04:00
-
1794610f77
fix: ownCo not found → getOrCreateCompany instead of companies[0]
cairnr01probe
2026-06-11 11:18:59 +04:00
-
2acad33fd4
fix: admin without ?company= loads own company (no redirect)
cairnr01probe
2026-06-11 11:16:37 +04:00
-
4f1f64dd6c
feat: adminMode — чек-бокс переключения админского интерфейса
cairnr01probe
2026-06-11 11:08:03 +04:00
-
8c1787df19
bump 0.5.37 — debug /debug-session endpoint
cairnr01probe
2026-06-11 10:49:54 +04:00
-
02859d6a7a
fix: replace regex constraint with LIKE '%/%' for PG compat
cairnr01probe
2026-06-10 11:51:08 +04:00
-
32cb0f4ac6
fix: block clientId login in OIDC mode (crash fix)
cairnr01probe
2026-06-10 11:42:50 +04:00
-
e22b7ac408
bump 0.5.34 — save idToken for logout
cairnr01probe
2026-06-09 22:37:05 +04:00
-
54f950b7d1
bump 0.5.33 — revert idToken, logout via KC config
cairnr01probe
2026-06-09 22:29:15 +04:00
-
9fc3665292
bump 0.5.32 — remove audience check from JWT verify
cairnr01probe
2026-06-09 22:17:23 +04:00
-
4a45546b0d
bump 0.5.31 — disable state check in production for SSO test
cairnr01probe
2026-06-09 22:01:26 +04:00
-
9b76333b22
bump 0.5.30 — restore state check, clean code
cairnr01probe
2026-06-09 21:59:26 +04:00
-
a39f97f3b4
bump 0.5.29 — add KC_BASE_URL to exchange error
cairnr01probe
2026-06-09 21:56:45 +04:00
-
6c5215513c
bump 0.5.28 — disable state check for SSO test
cairnr01probe
2026-06-09 21:53:07 +04:00
-
61361ec7e2
bump 0.5.27 — error handler: URL, user, clientId, stack
cairnr01probe
2026-06-09 21:01:33 +04:00
-
d0bfdab085
bump 0.5.26 — fix server.js error handler to show message
cairnr01probe
2026-06-09 21:01:00 +04:00
-
9c74479121
bump 0.5.25 — error details on 500 page, ensureSchema catch
cairnr01probe
2026-06-09 20:56:58 +04:00
-
51b6fdf132
bump 0.5.24
cairnr01probe
2026-06-09 20:51:33 +04:00
-
e3ebd8ba4e
Revert "bump 0.5.24"
cairnr01probe
2026-06-09 20:49:59 +04:00
-
f5141f652f
bump 0.5.24
cairnr01probe
2026-06-09 20:49:35 +04:00
-
f40bcb84fd
feat: ensureSchema — приложение само создаёт таблицы при старте
cairnr01probe
2026-06-09 19:55:07 +04:00
-
b0e43f981b
Revert "feat: auto-migration on startup (ensureSchema)"
cairnr01probe
2026-06-09 19:48:43 +04:00
-
dce2368712
feat: auto-migration on startup (ensureSchema)
cairnr01probe
2026-06-09 19:46:19 +04:00
-
9fd808bc1f
chore: DB defaults for managed platform, reduce required env vars
cairnr01probe
2026-06-09 19:20:29 +04:00
-
393595301b
fix: IAM_API_URL default to dev, document env selection
cairnr01probe
2026-06-06 12:00:27 +04:00
-
ae6f3c4f8d
fix: devops-deploy.md — multi-company через IAM
cairnr01probe
2026-06-04 16:52:07 +03:00
-
1f1d70e577
fix: AGENT-GUIDE comma-separated → IAM profiles
cairnr01probe
2026-06-04 16:50:47 +03:00
-
e7aeceb3b6
fix: README multi-company — IAM вместо comma-separated
cairnr01probe
2026-06-04 16:49:50 +03:00
-
4f8695aeda
docs: AGENT-GUIDE 0.5.23 + changelog
cairnr01probe
2026-06-04 16:39:44 +03:00
-
28954515e3
cleanup: убраны устаревшие comma-separated clientId
cairnr01probe
2026-06-04 16:38:33 +03:00
-
a0b66bb602
docs: wowater.md + README 0.5.23
cairnr01probe
2026-06-04 16:36:45 +03:00
-
e9bd94cea3
fix: 0.0.0.0/8 → blocked ranges + bump 0.5.23
cairnr01probe
2026-06-04 16:13:04 +03:00
-
05c6920987
cleanup: PRODUCTION-READY-ANALYSIS.md → audits/
cairnr01probe
2026-06-04 16:02:20 +03:00
-
3ef5478130
cleanup: PROJECT-AUDIT.md → audits/, ++gitignore
cairnr01probe
2026-06-04 15:59:59 +03:00
-
a3cf9812df
cleanup: аудиты → audits/, версии актуальны, gitignore
cairnr01probe
2026-06-04 15:56:38 +03:00
-
c1df27d29d
fix: DeepSeek audit — header injection + IAM limit + bump 0.5.22
cairnr01probe
2026-06-04 15:48:16 +03:00
-
58e34042de
fix: header injection, api timeout, nginx duplicate + bump 0.5.21
cairnr01probe
2026-06-04 15:41:03 +03:00
-
99796202cb
fix: IAM warning, nginx doc, fail-fast IAM_API_URL + bump 0.5.20
cairnr01probe
2026-06-04 15:33:32 +03:00
-
7b66b94774
bump: 0.5.19 (redirect security fixes)
cairnr01probe
2026-06-04 15:27:17 +03:00
-
8cbbe52316
fix: safeReturn для всех редиректов (security)
cairnr01probe
2026-06-04 15:26:26 +03:00
-
6edef60ed8
bump: 0.5.18 (IAM integration)
cairnr01probe
2026-06-04 15:11:53 +03:00
-
bbcda90378
fix: IAM баги после ревью
cairnr01probe
2026-06-04 15:08:40 +03:00
-
a8a07fe019
feat: IAM API интеграция + обновление ТЗ + тесты
cairnr01probe
2026-06-04 13:53:44 +03:00
-
878e46287b
v0.5.17: owner_email в companies + универсальный парсер токенов + jwt.decode fallback
cairnr01probe
2026-06-03 15:17:56 +03:00
-
0b3f1ab445
gitignore: добавить docs/agent-opinions.md
cairnr01probe
2026-06-03 13:41:00 +03:00
-
c10b70f97a
cleanup: заменить тестовый email на example.com в keycloak-auth-reference
cairnr01probe
2026-06-03 13:21:36 +03:00
-
b7fe03f02d
cleanup финал: AGENT-GUIDE SSH-команда, deploy-keycloak URL, keycloak-auth ФИО/namespaces
cairnr01probe
2026-06-03 13:19:46 +03:00
-
f5dd0eaf15
cleanup: ТЗ-плюс — убрать реальные URL, email, deck-test client_id
cairnr01probe
2026-06-03 13:18:00 +03:00
-
8577ffa05c
fix README: devops-deploy не английский
cairnr01probe
2026-06-03 13:13:42 +03:00
-
2194c1650f
cleanup: убрать IP, реальные URL, креды из публичных файлов
cairnr01probe
2026-06-03 13:10:48 +03:00
-
43fa0faf7a
docs: fix нумерация шагов, client scope, README обрезанная фраза + версия
cairnr01probe
2026-06-03 13:05:40 +03:00
-
2a77b163db
fix docs/devops-deploy — чёткий порядок, без дыр
cairnr01probe
2026-06-03 13:02:42 +03:00