Cedric Hornberger

Cedric created pull request Cedric/XpenselyServer#12

2026-05-05 17:02:48 +02:00

security hardening

Cedric pushed to feature/security-hardening at Cedric/XpenselyServer

2026-05-05 17:00:04 +02:00

9b95741292 fix: add /docs/superpowers to .gitignore

Cedric pushed to feature/security-hardening at Cedric/XpenselyServer

2026-05-05 16:59:49 +02:00

2bd229cc5e Remove docs from tracking

797d482ebf fix: use ResourceNotFoundException for not-found cases in updateExpense, IllegalArgumentException for ownership mismatch in deleteCustomCategory

906b60d264 fix: single-param JPQL queries, ResourceNotFoundException throughout ExpenseListService, remove addExpenseToList loop

68783cc892 fix: throw ResourceNotFoundException instead of returning null, replace full-table-scan list queries with JPQL

Compare 4 commits »

Cedric created branch feature/security-hardening in Cedric/XpenselyServer

2026-05-05 12:38:49 +02:00

Cedric pushed to feature/security-hardening at Cedric/XpenselyServer

2026-05-05 12:38:49 +02:00

9c91da9f30 test: fix ExpenseListRepositoryTest with H2 and proper save-then-find pattern

024b3880e7 security: add per-user/IP rate limiting via Bucket4j

457efab452 security: enforce JWT-based authorization on AppUserController

95688e5111 test: add unit tests for AuthenticatedUserResolver

bb2a4d70b2 feat: add ExpenseListController validation and authorization tests

Compare 10 commits »