cschlaefke/Shuffle
1
0
Fork 0
Code Issues 33 Pull requests 2 Projects Releases Packages Wiki Activity Actions
72 commits 3 branches 0 tags 4.3 MiB
Commit graph

18 commits

Author SHA1 Message Date
cschlaefke
c0f832fd1d docs(catalog): record approval and decisions F1-F9 in KAT-05 spec
All checks were successful
CI / flutter (pull_request) Successful in 1m18s
Details
CI / web-build (pull_request) Successful in 56s
Details
CI / supabase (pull_request) Successful in 4s
Details
CI / supabase-tests (pull_request) Successful in 33s
Details
CI / e2e (pull_request) Successful in 2m51s
Details 
Refs #2

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 13:15:52 +00:00
cschlaefke
074118db69 docs(catalog): note default privileges, studio role and schema test count 
Refs #2

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 13:08:49 +00:00
cschlaefke
34eaab12e1 docs(catalog): add technical spec for KAT-05 catalog data 
Refs #2

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 13:02:24 +00:00
cschlaefke
ffc30db2e5 fix(auth): address review findings for semantics split
All checks were successful
CI / flutter (pull_request) Successful in 1m14s
Details
CI / web-build (pull_request) Successful in 53s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 30s
Details
CI / e2e (pull_request) Successful in 2m56s
Details 
Refs #41

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 13:17:09 +01:00
cschlaefke
3805c71225 fix(auth): address review findings for smtp-neutral handling
Some checks failed
CI / flutter (pull_request) Failing after 44s
Details
CI / web-build (pull_request) Successful in 51s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 29s
Details
CI / e2e (pull_request) Successful in 2m44s
Details 
Refs #37

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 12:24:25 +01:00
cschlaefke
de093b68ed docs(auth): renumber SMTP risk to R17 (R16 was taken) 
Refs #37

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 12:03:11 +01:00
cschlaefke
7d094a6732 fix(auth): treat SMTP failures like success on enumeration-sensitive calls 
Refs #37

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 12:03:04 +01:00
cschlaefke
aa421b12b0 test(auth): address review findings for e2e
Some checks failed
CI / flutter (pull_request) Successful in 1m15s
Details
CI / web-build (pull_request) Successful in 53s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 30s
Details
CI / e2e (pull_request) Failing after 3m56s
Details 
Refs #38

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 10:55:27 +01:00
cschlaefke
7c2f684098 fix(auth): address review findings for password reset
All checks were successful
CI / flutter (pull_request) Successful in 1m13s
Details
CI / web-build (pull_request) Successful in 55s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 30s
Details 
Finish the recovery guard only after the password change, mark the change
in the repository so a late userUpdated event is harmless, keep the form
locked after success, carry from through the reset check-email page,
share the password error texts and focus the continue button.

Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 09:58:31 +01:00
cschlaefke
3b2995463e docs(auth): document 01c deviations, reset mode route and AppBanner actionEnabled 
Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 09:50:42 +01:00
cschlaefke
87c0d7d1ec feat(auth): add password reset (forgot password, recovery link, new password) 
ForgotPasswordScreen with neutral reaction (F12), CheckEmail reset mode on
its own path, recovery link handling and ResetPasswordScreen with the
recovery guard held until the user confirms the success message. Carries
the from parameter between login, register and forgot password. Removes
the route placeholders.

Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 09:47:03 +01:00
cschlaefke
239d0e1ac2 fix(auth): address review findings for registration
All checks were successful
CI / flutter (pull_request) Successful in 1m16s
Details
CI / web-build (pull_request) Successful in 53s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 32s
Details 
- expose legal links to screen readers on web
- allow only http(s) legal URLs, prevent double submit
- detect transport errors without runtimeType, keep extra in memory
- ship third-party license text, document decisions

Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-03 00:47:42 +01:00
cschlaefke
3158abc344 docs(auth): use trim_ws in spec 
Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 23:58:11 +01:00
cschlaefke
9f36cd0c33 feat(db): reject U+200B in display names
All checks were successful
CI / flutter (pull_request) Successful in 1m3s
Details
CI / web-build (pull_request) Successful in 54s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 34s
Details 
Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 23:51:56 +01:00
cschlaefke
fb0f4b9d3f fix(db): trim all Unicode whitespace in display name, harden templates
All checks were successful
CI / flutter (pull_request) Successful in 1m3s
Details
CI / web-build (pull_request) Successful in 58s
Details
CI / supabase (pull_request) Successful in 3s
Details
CI / supabase-tests (pull_request) Successful in 34s
Details 
- add public.trim_ws mirroring Dart String.trim
- require JSON string metadata, tolerate non-string locale in templates
- add tests, align docs with review

Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 23:48:01 +01:00
cschlaefke
47721a48e8 docs(auth): align spec with spike results and add AUTH-CFG-25 
Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 23:26:03 +01:00
cschlaefke
395816609f feat(db): enforce registration rules and add terms_version 
Adds display name validation, terms_version, locale sync trigger and
pgTAP tests (KTO-01 criteria 1, 2, 10, 11). Includes GoTrue spike results.

Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 22:36:21 +01:00
cschlaefke
e56f75a5e1 docs(auth): add spec for KTO-01 registration, login and password reset 
Refs #1

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-02 20:10:07 +01:00