-
21a2c65296
v2: IAM fallback — JWT claims если IAM недоступен
“Naeel”
2026-06-12 16:31:18 +04:00
-
8f8093fa29
v2: детальное логирование postForm + exchangeCode
“Naeel”
2026-06-12 16:26:17 +04:00
-
3e4c5cb1af
v2: отладка exchangeCode — логируем ответ Keycloak
“Naeel”
2026-06-12 16:08:10 +04:00
-
5aee05e8dc
v2: конфиг — process.env с умолчаниями, без dotenv и .env
“Naeel”
2026-06-12 16:00:34 +04:00
-
0733f4eaa1
v2: хардкод конфиг — без env, без V2_*, без .env
“Naeel”
2026-06-12 15:59:25 +04:00
-
ac13330fdb
v2: изоляция — свои V2_* env, v2/.env, не трогает основные переменные
“Naeel”
2026-06-12 15:58:17 +04:00
-
5c09844002
v2: модуль аутентификации Keycloak + IAM, роутер /v2
“Naeel”
2026-06-12 15:47:32 +04:00
-
b2f1cae37d
docs: session history 2026-06-11 with remaining tasks
“Naeel”
2026-06-12 13:43:25 +04:00
-
2993f95b8d
tz
“Naeel”
2026-06-11 21:38:19 +04:00
-
199585be67
docs: add actual TOR (ТЗ-факт) based on implemented features
“Naeel”
2026-06-11 21:36:40 +04:00
-
f818f454a3
fix: deleted entries shown with strikethrough + opacity, edit/delete hidden
“Naeel”
2026-06-11 21:26:05 +04:00
-
bc209aeab8
release: bump 0.5.57
“Naeel”
2026-06-11 21:15:45 +04:00
-
a601570a4a
fix: return includeDeleted checkbox + submit button for admin filter (no JS)
“Naeel”
2026-06-11 21:07:59 +04:00
-
5781b37882
fix: audit table has impersonated_by column + filter uses button submit (no JS)
“Naeel”
2026-06-11 20:47:03 +04:00
-
ffdc12bdf8
fix: syntax error in /debug-session — missing closing brace
“Naeel”
2026-06-11 20:39:30 +04:00
-
001db2a556
debug: /debug-session shows last audit log entries (impersonated_by)
“Naeel”
2026-06-11 20:32:23 +04:00
-
447acba762
fix: impersonation banner shows activeClientId instead of raw JWT clientId
“Naeel”
2026-06-11 20:27:08 +04:00
-
8f9e0a96ad
fix: reject client_id when allowedIds list is empty (no IAM, no JWT claims)
“Naeel”
2026-06-11 20:18:55 +04:00
-
68ea44a81d
fix: X-Imp-* headers bridge UI→API impersonation + timezone GMT+4
“Naeel”
2026-06-11 20:17:07 +04:00
-
d0a0fdc264
chore: exclude sonnet analysis files from git
“Naeel”
2026-06-11 20:03:08 +04:00
-
1350f0dbba
security: fix OIDC state check bypass + open redirect in login-token
“Naeel”
2026-06-11 20:02:49 +04:00
-
351cb6afe6
feat: test impersonation via IMPERSONATION_ORIGINAL/TARGET/COMPANY env vars
“Naeel”
2026-06-11 19:25:11 +04:00
-
e0cbf4bf35
fix: /export defaults to JSON, ?format=txt for plain text
“Naeel”
2026-06-11 16:32:19 +04:00
-
e3c4c738aa
feat: /export?format=json — JSON export for admin
“Naeel”
2026-06-11 16:29:24 +04:00
-
3bc285dc93
fix: /export only for adminMode users, not public
“Naeel”
2026-06-11 16:28:15 +04:00
-
6025d84959
fix: add ALTER TABLE migration for impersonated_by column
“Naeel”
2026-06-11 16:20:52 +04:00
-
7758d70dcf
feat: double audit — impersonated_by in audit_log
“Naeel”
2026-06-11 16:10:41 +04:00
-
9c51e449ab
fix: remove canWrite from IAM — it is IAM RBAC, not our app logic
“Naeel”
2026-06-11 16:01:55 +04:00
-
9a331eec82
feat: full IAM impersonation support — read-only + original user + canWrite
“Naeel”
2026-06-11 15:54:56 +04:00
-
a2cfd2c10f
feat: IAM impersonation support — isImpersonated flag + banner
“Naeel”
2026-06-11 15:34:19 +04:00
-
7b3dd8b4b3
fix: всегда показывать email залогиненного, не owner_email компании
“Naeel”
2026-06-11 15:16:59 +04:00
-
ce6b67e72a
fix: email from session.user first, not JWT payload
“Naeel”
2026-06-11 15:08:07 +04:00
-
9cb53df8b1
fix: toggle as pure HTML form — no JS, no fetch, just POST+redirect
“Naeel”
2026-06-11 14:59:59 +04:00
-
fa4d5646fa
fix: toggle now works — JSON response + immediate CSS flip
“Naeel”
2026-06-11 14:42:31 +04:00
-
f739754c3b
fix: pass canAdminMode to render + bump 0.5.47
“Naeel”
2026-06-11 14:34:42 +04:00
-
cad6ebb4d6
release: bump 0.5.46
“Naeel”
2026-06-11 14:24:46 +04:00
-
8b891a4bed
fix: remove duplicate catch block causing startup crash
“Naeel”
2026-06-11 14:19:01 +04:00
-
08248229b9
fix: если email мой — isAdmin = true, canAdminMode = true
“Naeel”
2026-06-11 14:10:52 +04:00
-
2fbdc3259b
hardcode: canAdminMode для ntazetdinov@nubes.ru без зависимостей
“Naeel”
2026-06-11 14:10:00 +04:00
-
d54a72ca2c
debug: add resolveUser logging for canAdminMode diagnosis
“Naeel”
2026-06-11 14:04:36 +04:00
-
4af34616f9
fix: canAdminMode по email ntazetdinov@nubes.ru вместо isAdmin
“Naeel”
2026-06-11 13:41:35 +04:00
-
13466ebd37
simplify: toggle adminMode, canAdminMode flag, remove getOrCreateCompany fallback
“Naeel”
2026-06-11 13:15:37 +04:00
-
1794610f77
fix: ownCo not found → getOrCreateCompany instead of companies[0]
“Naeel”
2026-06-11 11:18:59 +04:00
-
2acad33fd4
fix: admin without ?company= loads own company (no redirect)
“Naeel”
2026-06-11 11:16:37 +04:00
-
4f1f64dd6c
feat: adminMode — чек-бокс переключения админского интерфейса
“Naeel”
2026-06-11 11:08:03 +04:00
-
8c1787df19
bump 0.5.37 — debug /debug-session endpoint
“Naeel”
2026-06-11 10:49:54 +04:00
-
02859d6a7a
fix: replace regex constraint with LIKE '%/%' for PG compat
“Naeel”
2026-06-10 11:51:08 +04:00
-
32cb0f4ac6
fix: block clientId login in OIDC mode (crash fix)
“Naeel”
2026-06-10 11:42:50 +04:00
-
e22b7ac408
bump 0.5.34 — save idToken for logout
“Naeel”
2026-06-09 22:37:05 +04:00
-
54f950b7d1
bump 0.5.33 — revert idToken, logout via KC config
“Naeel”
2026-06-09 22:29:15 +04:00
-
9fc3665292
bump 0.5.32 — remove audience check from JWT verify
“Naeel”
2026-06-09 22:17:23 +04:00
-
4a45546b0d
bump 0.5.31 — disable state check in production for SSO test
“Naeel”
2026-06-09 22:01:26 +04:00
-
9b76333b22
bump 0.5.30 — restore state check, clean code
“Naeel”
2026-06-09 21:59:26 +04:00
-
a39f97f3b4
bump 0.5.29 — add KC_BASE_URL to exchange error
“Naeel”
2026-06-09 21:56:45 +04:00
-
6c5215513c
bump 0.5.28 — disable state check for SSO test
“Naeel”
2026-06-09 21:53:07 +04:00
-
61361ec7e2
bump 0.5.27 — error handler: URL, user, clientId, stack
“Naeel”
2026-06-09 21:01:33 +04:00
-
d0bfdab085
bump 0.5.26 — fix server.js error handler to show message
“Naeel”
2026-06-09 21:01:00 +04:00
-
9c74479121
bump 0.5.25 — error details on 500 page, ensureSchema catch
“Naeel”
2026-06-09 20:56:58 +04:00
-
51b6fdf132
bump 0.5.24
“Naeel”
2026-06-09 20:51:33 +04:00
-
e3ebd8ba4e
Revert "bump 0.5.24"
“Naeel”
2026-06-09 20:49:59 +04:00
-
f5141f652f
bump 0.5.24
“Naeel”
2026-06-09 20:49:35 +04:00
-
f40bcb84fd
feat: ensureSchema — приложение само создаёт таблицы при старте
“Naeel”
2026-06-09 19:55:07 +04:00
-
b0e43f981b
Revert "feat: auto-migration on startup (ensureSchema)"
“Naeel”
2026-06-09 19:48:43 +04:00
-
dce2368712
feat: auto-migration on startup (ensureSchema)
“Naeel”
2026-06-09 19:46:19 +04:00
-
9fd808bc1f
chore: DB defaults for managed platform, reduce required env vars
“Naeel”
2026-06-09 19:20:29 +04:00
-
393595301b
fix: IAM_API_URL default to dev, document env selection
“Naeel”
2026-06-06 12:00:27 +04:00
-
ae6f3c4f8d
fix: devops-deploy.md — multi-company через IAM
“Naeel”
2026-06-04 16:52:07 +03:00
-
1f1d70e577
fix: AGENT-GUIDE comma-separated → IAM profiles
“Naeel”
2026-06-04 16:50:47 +03:00
-
e7aeceb3b6
fix: README multi-company — IAM вместо comma-separated
“Naeel”
2026-06-04 16:49:50 +03:00
-
4f8695aeda
docs: AGENT-GUIDE 0.5.23 + changelog
“Naeel”
2026-06-04 16:39:44 +03:00
-
28954515e3
cleanup: убраны устаревшие comma-separated clientId
“Naeel”
2026-06-04 16:38:33 +03:00
-
a0b66bb602
docs: wowater.md + README 0.5.23
“Naeel”
2026-06-04 16:36:45 +03:00
-
e9bd94cea3
fix: 0.0.0.0/8 → blocked ranges + bump 0.5.23
“Naeel”
2026-06-04 16:13:04 +03:00
-
05c6920987
cleanup: PRODUCTION-READY-ANALYSIS.md → audits/
“Naeel”
2026-06-04 16:02:20 +03:00
-
3ef5478130
cleanup: PROJECT-AUDIT.md → audits/, ++gitignore
“Naeel”
2026-06-04 15:59:59 +03:00
-
a3cf9812df
cleanup: аудиты → audits/, версии актуальны, gitignore
“Naeel”
2026-06-04 15:56:38 +03:00
-
c1df27d29d
fix: DeepSeek audit — header injection + IAM limit + bump 0.5.22
“Naeel”
2026-06-04 15:48:16 +03:00
-
58e34042de
fix: header injection, api timeout, nginx duplicate + bump 0.5.21
“Naeel”
2026-06-04 15:41:03 +03:00
-
99796202cb
fix: IAM warning, nginx doc, fail-fast IAM_API_URL + bump 0.5.20
“Naeel”
2026-06-04 15:33:32 +03:00
-
7b66b94774
bump: 0.5.19 (redirect security fixes)
“Naeel”
2026-06-04 15:27:17 +03:00
-
8cbbe52316
fix: safeReturn для всех редиректов (security)
“Naeel”
2026-06-04 15:26:26 +03:00
-
6edef60ed8
bump: 0.5.18 (IAM integration)
“Naeel”
2026-06-04 15:11:53 +03:00
-
bbcda90378
fix: IAM баги после ревью
“Naeel”
2026-06-04 15:08:40 +03:00
-
a8a07fe019
feat: IAM API интеграция + обновление ТЗ + тесты
“Naeel”
2026-06-04 13:53:44 +03:00
-
878e46287b
v0.5.17: owner_email в companies + универсальный парсер токенов + jwt.decode fallback
“Naeel”
2026-06-03 15:17:56 +03:00
-
0b3f1ab445
gitignore: добавить docs/agent-opinions.md
“Naeel”
2026-06-03 13:41:00 +03:00
-
c10b70f97a
cleanup: заменить тестовый email на example.com в keycloak-auth-reference
“Naeel”
2026-06-03 13:21:36 +03:00
-
b7fe03f02d
cleanup финал: AGENT-GUIDE SSH-команда, deploy-keycloak URL, keycloak-auth ФИО/namespaces
“Naeel”
2026-06-03 13:19:46 +03:00
-
f5dd0eaf15
cleanup: ТЗ-плюс — убрать реальные URL, email, deck-test client_id
“Naeel”
2026-06-03 13:18:00 +03:00
-
8577ffa05c
fix README: devops-deploy не английский
“Naeel”
2026-06-03 13:13:42 +03:00
-
2194c1650f
cleanup: убрать IP, реальные URL, креды из публичных файлов
“Naeel”
2026-06-03 13:10:48 +03:00
-
43fa0faf7a
docs: fix нумерация шагов, client scope, README обрезанная фраза + версия
“Naeel”
2026-06-03 13:05:40 +03:00
-
2a77b163db
fix docs/devops-deploy — чёткий порядок, без дыр
“Naeel”
2026-06-03 13:02:42 +03:00
-
006741a5fa
fix gitignore — вернуть docs паттерны, убрать kubeconfig из трека
“Naeel”
2026-06-03 12:44:51 +03:00
-
8e72fc4559
bump v0.5.13 → v0.5.14
“Naeel”
2026-06-03 12:37:21 +03:00
-
38c7adf25d
v0.5.14 — вход по токену, JWKS в mock-режиме, production deploy docs
“Naeel”
2026-06-03 12:37:10 +03:00
-
22beaa86a3
v0.5.13: AGENT-GUIDE.md — полный гайд для AI-агентов (англ.)
“Naeel”
2026-06-03 06:22:35 +03:00
-
2841e3ac27
v0.5.13: gitignore разработческих файлов (DevOps-чистота)
“Naeel”
2026-06-03 06:19:55 +03:00
-
8feabc339d
v0.5.13: DevOps-деплой гайд + .env.example
“Naeel”
2026-06-03 06:17:49 +03:00
-
ba0779db51
v0.5.13: подготовка OIDC (Keycloak) — роуты готовы, ждут DevOps
“Naeel”
2026-06-03 06:12:22 +03:00