Cedric 457efab452 security: enforce JWT-based authorization on AppUserController ...

Added AuthenticatedUserResolver injection and assertSelf guard to
getUser, getUserByGoogleId, and deleteUser endpoints. createUser
remains open for registration. Added 7 controller tests covering
validation failures and 403 enforcement.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-05 11:13:05 +02:00

.gitea/workflows

major minor version tagging

2025-01-12 12:36:43 +01:00

.mvn/wrapper

first commit

2024-12-22 22:32:48 +01:00

docs/superpowers

docs: add security hardening implementation plan

2026-05-04 22:22:54 +02:00

src

security: enforce JWT-based authorization on AppUserController

2026-05-05 11:13:05 +02:00

.gitattributes

first commit

2024-12-22 22:32:48 +01:00

.gitignore

better secret handling docker api upgrade

2025-01-07 23:40:00 +01:00

apiDesign.drawio

expense List logic

2024-12-24 23:04:35 +01:00

docker-compose.yml

docker-compose.yml aktualisiert

2026-02-04 15:29:55 +01:00

dockerfile

dockerfile aktualisiert

2026-02-04 15:31:16 +01:00

mvnw

first commit

2024-12-22 22:32:48 +01:00

mvnw.cmd

first commit

2024-12-22 22:32:48 +01:00

pom.xml

build: add spring-boot-starter-validation and bucket4j-core

2026-05-04 22:34:10 +02:00

S

Description

No description provided

350 KiB

Releases 5

Category Support Latest

2025-05-11 01:15:35 +02:00

Languages

Java 100%