Cedric
b19cdd0264
feat: record history and lastModified on expense mutations
2026-07-06 12:40:32 +02:00
Cedric
27f747b44d
fix: migrate HistoryService to Jackson 3 (Spring Boot 4)
2026-07-06 12:35:39 +02:00
Cedric
8f42add0c2
feat: HistoryService with field-level diff logic
2026-07-06 12:27:55 +02:00
Cedric
9d1cf862c7
feat: history entity, repository and Expense.lastModified
2026-07-06 12:21:05 +02:00
Cedric
6203a83af3
Fix Tag Workflow
Build and Deploy Spring Boot Server / build (push) Successful in 1m19s
2026-07-05 00:08:18 +02:00
Cedric
41e32efd7e
Added Rename User and Lists
Build and Deploy Spring Boot Server / build (push) Successful in 1m18s
2026-07-04 22:50:54 +02:00
Cedric
d73d349a58
Release 1.1.0 Final Security Hardening
Build and Deploy Spring Boot Server / build (push) Successful in 1m11s
2026-07-04 22:14:58 +02:00
Cedric
f958fb7853
Fixed Auth and Connection issues
Build and Deploy Spring Boot Server / build (push) Successful in 3m41s
2026-07-04 17:31:21 +02:00
Cedric
7ad72119a8
fix secrets no longer needed
Build and Deploy Spring Boot Server / build (push) Successful in 1m13s
2026-05-14 23:46:40 +02:00
Cedric
f7f2bf5768
ci: switch to compose.deploy to force fresh image pull
Build and Deploy Spring Boot Server / build (push) Successful in 1m12s
2026-05-12 23:57:45 +02:00
Cedric
28df2a66ca
fix: always pull latest image on redeploy
Build and Deploy Spring Boot Server / build (push) Successful in 1m21s
2026-05-12 23:25:07 +02:00
Cedric
29f26a8a18
feat: add /api/version endpoint returning build time and version
Build and Deploy Spring Boot Server / build (push) Successful in 1m25s
2026-05-12 23:08:37 +02:00
Cedric
a3fa59f347
ci: test full pipeline end-to-end
Build and Deploy Spring Boot Server / build (push) Successful in 1m12s
2026-05-12 20:34:42 +02:00
Cedric
2880934644
ci: test full pipeline end-to-end
Build and Deploy Spring Boot Server / build (push) Successful in 1m10s
2026-05-10 23:43:13 +02:00
Cedric
b42980200d
ci: trigger Dokploy redeploy via API after image push
Build and Deploy Spring Boot Server / build (push) Failing after 1m48s
2026-05-10 23:38:07 +02:00
Cedric
8381cdbffa
ci: test full pipeline
Build and Deploy Spring Boot Server / build (push) Successful in 1m20s
2026-05-10 22:59:53 +02:00
Cedric
5cab2fed3b
ci: test Dokploy webhook
Build and Deploy Spring Boot Server / build (push) Successful in 1m13s
2026-05-10 22:36:44 +02:00
Cedric
417eef7042
ci: fix Dokploy webhook, token is in URL not Authorization header
Build and Deploy Spring Boot Server / build (push) Failing after 1m11s
2026-05-10 22:29:40 +02:00
Cedric
ed5543ce61
ci: fix Java 21 in dockerfile, add Docker Hub login to avoid rate limits
Build and Deploy Spring Boot Server / build (push) Failing after 1m23s
2026-05-10 22:22:06 +02:00
Cedric
40b8f45de8
ci: test with Java 21 runner image
Build and Deploy Spring Boot Server / build (push) Failing after 1m2s
2026-05-10 22:15:16 +02:00
Cedric
b221d07b48
ci: use ubuntu-java17 runner image, remove setup-java step
Build and Deploy Spring Boot Server / build (push) Failing after 2m22s
2026-05-10 22:08:23 +02:00
Cedric
0e63b6e4e6
ci: fix mvnw executable permission
Build and Deploy Spring Boot Server / build (push) Has been cancelled
2026-05-10 22:07:30 +02:00
Cedric
4a04c85fe8
ci: use Maven wrapper instead of mvn to fix command not found on Gitea runner
Build and Deploy Spring Boot Server / build (push) Failing after 4m43s
2026-05-10 21:40:25 +02:00
Cedric
b8e2c9114d
chore: merge main into dev, keep clean docker-compose from main
Build and Deploy Spring Boot Server / build (push) Failing after 9m2s
2026-05-10 21:29:11 +02:00
Cedric
0876eecf50
ci: improve dev pipeline with Dokploy webhook and Docker layer caching
2026-05-10 21:27:28 +02:00
Cedric
5549691d50
ci: test pipeline
2026-05-10 21:24:18 +02:00
Cedric
46c8df45d6
ci: test pipeline
2026-05-10 21:24:10 +02:00
Cedric
50d274f36a
chore: resolve merge conflicts, keep Spring Boot 4.0.6 version
...
Kept our version over remote (security hardening PR #12 ) for all conflicts:
- pom.xml: Spring Boot 4.0.6 vs 3.4.1, new test deps
- SecurityConfig: new csrf/package API for SB4
- GlobalExceptionHandler: full handler set with SLF4J logging
- AppUserController/ExpenseListController: clean delegation to GlobalExceptionHandler
- Test files: SB4 package paths, extra test coverage
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-10 20:29:49 +02:00
Cedric
ba4f365f06
chore: merge feature/security-hardening into main
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-10 20:25:12 +02:00
Cedric
a5e5824a44
docs: write recent changes section
2026-05-10 20:18:58 +02:00
Cedric
7189e4fb08
docs: write error handling section
2026-05-10 20:18:28 +02:00
Cedric
2782823c3d
docs: write data models section
2026-05-10 20:17:55 +02:00
Cedric
ddf64305a5
docs: write expense lists endpoint section
2026-05-10 20:17:22 +02:00
Cedric
2b84ed0de8
docs: write home and users endpoint sections
2026-05-10 20:14:22 +02:00
Cedric
18e740bb73
docs: write rate limiting section
2026-05-10 20:13:58 +02:00
Cedric
9b93cd97a6
docs: write authentication section
2026-05-09 23:56:14 +02:00
Cedric
8fb1820bc7
docs: write API overview section
2026-05-09 23:50:42 +02:00
Cedric
9c35bb8435
docs: scaffold API.md with section headings
2026-05-09 23:49:56 +02:00
Cedric
3d456f2f81
Bugfixes
2026-05-09 23:04:27 +02:00
Cedric
b1324e3048
test: add jsonPath field assertions to create validation tests
2026-05-06 14:40:11 +02:00
Cedric
8b96433b1a
feat: add CreateExpenseListRequest DTO with validation to POST /create endpoint
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-05 17:28:47 +02:00
Cedric
19c7e1915f
security hardening ( #12 )
...
Reviewed-on: #12
Co-authored-by: Cedric Hornberger <ceddi.hornberger@gmx.de >
Co-committed-by: Cedric Hornberger <ceddi.hornberger@gmx.de >
2026-05-05 17:13:53 +02:00
Cedric
f0de751da4
fix: centralise error handling in GlobalExceptionHandler, add SLF4J logging, remove HTTP 417 and e.printStackTrace()
...
- Expand GlobalExceptionHandler with handlers for ResourceNotFoundException (404),
UsernameAlreadyExistsException (409), ResponseStatusException (pass-through),
RuntimeException (500), and generic Exception (500); add SLF4J logging
- Remove all bare try/catch blocks and e.printStackTrace() calls from
ExpenseListController; add SLF4J logger field
- Add test: create_returns500_onUnexpectedServiceError
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-05 17:11:37 +02:00
Cedric
9b95741292
fix: add /docs/superpowers to .gitignore
2026-05-05 17:00:01 +02:00
Cedric
2bd229cc5e
Remove docs from tracking
2026-05-05 16:59:35 +02:00
Cedric
797d482ebf
fix: use ResourceNotFoundException for not-found cases in updateExpense, IllegalArgumentException for ownership mismatch in deleteCustomCategory
2026-05-05 16:55:01 +02:00
Cedric
906b60d264
fix: single-param JPQL queries, ResourceNotFoundException throughout ExpenseListService, remove addExpenseToList loop
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-05 16:40:31 +02:00
Cedric
68783cc892
fix: throw ResourceNotFoundException instead of returning null, replace full-table-scan list queries with JPQL
2026-05-05 15:20:46 +02:00
Cedric
9c91da9f30
test: fix ExpenseListRepositoryTest with H2 and proper save-then-find pattern
...
Added H2 as a test-scoped dependency so @DataJpaTest has an embedded
database. Rewrote the test to save an entity and assert on the returned
ID rather than assuming a record exists at ID=1.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-05 11:23:51 +02:00
Cedric
024b3880e7
security: add per-user/IP rate limiting via Bucket4j
...
RateLimitFilter (OncePerRequestFilter) enforces 60 req/min per
authenticated Google ID or client IP, using Bucket4j in-memory
token buckets. Filter is registered after BearerTokenAuthenticationFilter
in the production security chain. Added 4 unit tests covering
allow, block, per-IP isolation, and X-Forwarded-For preference.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-05 11:19:42 +02:00
Cedric