83 commits

Author	SHA1	Message	Date
cschlaefke	074118db69	docs(catalog): note default privileges, studio role and schema test count ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:08:49 +00:00
cschlaefke	34eaab12e1	docs(catalog): add technical spec for KAT-05 catalog data ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:02:24 +00:00
cschlaefke	6c4e2cc2e9	docs(ci): align auth-konfiguration guard wording with ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:59:02 +01:00
cschlaefke	25610c1ec9	docs(ci): correct guard rationale and unverified claims in ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:58:09 +01:00
cschlaefke	501310f43b	docs(ci): verify fork-PR approval logic and correct runner advice in ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:51:46 +01:00
cschlaefke	666ba64fcc	fix(ci): document fork-PR risk for docker-host runner and guard supabase-tests ... Add ADR-0003 with Forgejo 8.0.3 options and a step-by-step guide for runner/Forgejo settings, correct the misleading guard comments in ci.yml and apply the comfort guard to supabase-tests too. Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:50:25 +01:00
cschlaefke	ffc30db2e5	fix(auth): address review findings for semantics split ... Refs #41 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:17:09 +01:00
cschlaefke	cda9417353	fix(auth): keep heading, text and button as separate semantics nodes in the wide card ... Card is a semantics container without explicitChildNodes, so on >= 600 dp (web/tablet) title, text and button folded into one node. AppFormScaffold now wraps the card content in Semantics(explicitChildNodes: true). Refs #41 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:07:01 +01:00
cschlaefke	3805c71225	fix(auth): address review findings for smtp-neutral handling ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:24:25 +01:00
cschlaefke	de093b68ed	docs(auth): renumber SMTP risk to R17 (R16 was taken) ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:03:11 +01:00
cschlaefke	7d094a6732	fix(auth): treat SMTP failures like success on enumeration-sensitive calls ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:03:04 +01:00
cschlaefke	aa421b12b0	test(auth): address review findings for e2e ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:55:27 +01:00
cschlaefke	23816377a5	ci(e2e): add Playwright e2e job on docker-host with throttle GoTrue and artifacts ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:45:17 +01:00
cschlaefke	ec2d45c319	docs(auth): document E2E setup and SMTP outage spike result ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:42:28 +01:00
cschlaefke	7c2f684098	fix(auth): address review findings for password reset ... Finish the recovery guard only after the password change, mark the change in the repository so a late userUpdated event is harmless, keep the form locked after success, carry from through the reset check-email page, share the password error texts and focus the continue button. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:58:31 +01:00
cschlaefke	3b2995463e	docs(auth): document 01c deviations, reset mode route and AppBanner actionEnabled ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:50:42 +01:00
cschlaefke	87c0d7d1ec	feat(auth): add password reset (forgot password, recovery link, new password) ... ForgotPasswordScreen with neutral reaction (F12), CheckEmail reset mode on its own path, recovery link handling and ResetPasswordScreen with the recovery guard held until the user confirms the success message. Carries the from parameter between login, register and forgot password. Removes the route placeholders. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:47:03 +01:00
cschlaefke	dd91c078e0	feat(auth): add login screen with unconfirmed-account resend and safe redirect ... KTO-01 Kriterien 5, 6 und 7 (01b): LoginController/State/Screen replace the /login placeholder. Generic failure text for wrong email and password, resend via ResendController (ResendOrigin.login), throttle and offline banners, autofill hints, double-submit guard, validated from redirect. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:00:53 +01:00
cschlaefke	239d0e1ac2	fix(auth): address review findings for registration ... - expose legal links to screen readers on web - allow only http(s) legal URLs, prevent double submit - detect transport errors without runtimeType, keep extra in memory - ship third-party license text, document decisions Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:47:42 +01:00
cschlaefke	e632da2344	feat(auth): add registration, check-email and email-link screens ... Implements KTO-01 criteria 1-4, 10 and 11 (client part). Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:27:16 +01:00
cschlaefke	ec8b2ab4c1	feat(ui): add auth form components and screen layouts ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:03:11 +01:00
cschlaefke	3158abc344	docs(auth): use trim_ws in spec ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:58:11 +01:00
cschlaefke	9f36cd0c33	feat(db): reject U+200B in display names ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:51:56 +01:00
cschlaefke	fb0f4b9d3f	fix(db): trim all Unicode whitespace in display name, harden templates ... - add public.trim_ws mirroring Dart String.trim - require JSON string metadata, tolerate non-string locale in templates - add tests, align docs with review Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:48:01 +01:00
cschlaefke	47721a48e8	docs(auth): align spec with spike results and add AUTH-CFG-25 ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:26:03 +01:00
cschlaefke	59a47c5a5d	feat(auth): configure Supabase Auth and add de/en mail templates ... Adds AUTH-CFG settings, confirmation/recovery templates and docs/auth-konfiguration.md (KTO-01 criteria 1, 3, 4, 7, 8, 11). Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:23:06 +01:00
cschlaefke	395816609f	feat(db): enforce registration rules and add terms_version ... Adds display name validation, terms_version, locale sync trigger and pgTAP tests (KTO-01 criteria 1, 2, 10, 11). Includes GoTrue spike results. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 22:36:21 +01:00
cschlaefke	450af82234	Merge branch 'main' into feature/1-auth-registrierung-anmeldung	2026-11-02 22:21:24 +01:00
cschlaefke	b03d771869	fix(app): address review findings for foundation ... - add INTERNET permission, iOS localizations, html lang - make focus ring visible on FilledButton - neutral SITE_URL default, idempotent logger configure Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:36:58 +01:00
cschlaefke	adf61b3ba2	test: add pumpApp helpers, fakes and coverage matrix template ... Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:21:55 +01:00
cschlaefke	936ca7bd4b	feat(theme): add Material 3 light/dark theme base and design tokens ... Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:19:19 +01:00
cschlaefke	e56f75a5e1	docs(auth): add spec for KTO-01 registration, login and password reset ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:10:07 +01:00
cschlaefke	317634dac5	chore: initial project kit	2026-11-02 12:14:09 +01:00