21 commits

Author	SHA1	Message	Date
cschlaefke	23816377a5	ci(e2e): add Playwright e2e job on docker-host with throttle GoTrue and artifacts ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:45:17 +01:00
cschlaefke	ec2d45c319	docs(auth): document E2E setup and SMTP outage spike result ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:42:28 +01:00
cschlaefke	7c2f684098	fix(auth): address review findings for password reset ... Finish the recovery guard only after the password change, mark the change in the repository so a late userUpdated event is harmless, keep the form locked after success, carry from through the reset check-email page, share the password error texts and focus the continue button. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:58:31 +01:00
cschlaefke	3b2995463e	docs(auth): document 01c deviations, reset mode route and AppBanner actionEnabled ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:50:42 +01:00
cschlaefke	87c0d7d1ec	feat(auth): add password reset (forgot password, recovery link, new password) ... ForgotPasswordScreen with neutral reaction (F12), CheckEmail reset mode on its own path, recovery link handling and ResetPasswordScreen with the recovery guard held until the user confirms the success message. Carries the from parameter between login, register and forgot password. Removes the route placeholders. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:47:03 +01:00
cschlaefke	dd91c078e0	feat(auth): add login screen with unconfirmed-account resend and safe redirect ... KTO-01 Kriterien 5, 6 und 7 (01b): LoginController/State/Screen replace the /login placeholder. Generic failure text for wrong email and password, resend via ResendController (ResendOrigin.login), throttle and offline banners, autofill hints, double-submit guard, validated from redirect. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:00:53 +01:00
cschlaefke	239d0e1ac2	fix(auth): address review findings for registration ... - expose legal links to screen readers on web - allow only http(s) legal URLs, prevent double submit - detect transport errors without runtimeType, keep extra in memory - ship third-party license text, document decisions Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:47:42 +01:00
cschlaefke	e632da2344	feat(auth): add registration, check-email and email-link screens ... Implements KTO-01 criteria 1-4, 10 and 11 (client part). Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:27:16 +01:00
cschlaefke	ec8b2ab4c1	feat(ui): add auth form components and screen layouts ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:03:11 +01:00
cschlaefke	3158abc344	docs(auth): use trim_ws in spec ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:58:11 +01:00
cschlaefke	9f36cd0c33	feat(db): reject U+200B in display names ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:51:56 +01:00
cschlaefke	fb0f4b9d3f	fix(db): trim all Unicode whitespace in display name, harden templates ... - add public.trim_ws mirroring Dart String.trim - require JSON string metadata, tolerate non-string locale in templates - add tests, align docs with review Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:48:01 +01:00
cschlaefke	47721a48e8	docs(auth): align spec with spike results and add AUTH-CFG-25 ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:26:03 +01:00
cschlaefke	59a47c5a5d	feat(auth): configure Supabase Auth and add de/en mail templates ... Adds AUTH-CFG settings, confirmation/recovery templates and docs/auth-konfiguration.md (KTO-01 criteria 1, 3, 4, 7, 8, 11). Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:23:06 +01:00
cschlaefke	395816609f	feat(db): enforce registration rules and add terms_version ... Adds display name validation, terms_version, locale sync trigger and pgTAP tests (KTO-01 criteria 1, 2, 10, 11). Includes GoTrue spike results. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 22:36:21 +01:00
cschlaefke	450af82234	Merge branch 'main' into feature/1-auth-registrierung-anmeldung	2026-11-02 22:21:24 +01:00
cschlaefke	b03d771869	fix(app): address review findings for foundation ... - add INTERNET permission, iOS localizations, html lang - make focus ring visible on FilledButton - neutral SITE_URL default, idempotent logger configure Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:36:58 +01:00
cschlaefke	adf61b3ba2	test: add pumpApp helpers, fakes and coverage matrix template ... Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:21:55 +01:00
cschlaefke	936ca7bd4b	feat(theme): add Material 3 light/dark theme base and design tokens ... Refs #31 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:19:19 +01:00
cschlaefke	e56f75a5e1	docs(auth): add spec for KTO-01 registration, login and password reset ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 20:10:07 +01:00
cschlaefke	317634dac5	chore: initial project kit	2026-11-02 12:14:09 +01:00