rmcampos
fedbf30b2e
chore: use 50000 instead of 5000 for data constraint
Pull Request CI-Backend / Checks (pull_request) Successful in 49s
Pull Request CI-Frontend / Checks (pull_request) Successful in 2m48s
Pull Request CI-Frontend / Build & Push (pull_request) Successful in 51s
staging/deploy PR #4 staging ready
Pull Request CI-Backend / Build & Push (pull_request) Successful in 3m53s
2026-06-29 20:43:48 +02:00
rmcampos
ee39021ea8
test: fix test cases
Pull Request CI-Frontend / Checks (pull_request) Successful in 3m16s
Pull Request CI-Frontend / Build & Push (pull_request) Successful in 1m2s
Pull Request CI-Backend / Checks (pull_request) Successful in 5m49s
staging/deploy PR #4 staging ready
Pull Request CI-Backend / Build & Push (pull_request) Successful in 5m11s
2026-06-29 20:19:20 +02:00
rmcampos and Claude Sonnet 4.6
231dd7ed1a
security: fix short-term priority vulnerabilities
...
Pull Request CI-Backend / Checks (pull_request) Failing after 1m34s
Pull Request CI-Backend / Build & Push (pull_request) Has been skipped
Pull Request CI-Frontend / Checks (pull_request) Successful in 3m13s
staging/deploy PR #4 staging ready
Pull Request CI-Frontend / Build & Push (pull_request) Successful in 2m1s
- CR-7: replace deterministic UUID v5 (SHA-1 of email) with
UUID.randomUUID() for email confirmation tokens — prevents offline
token computation from a known email address
- CR-10: disable source maps in production Vite build
- H-1: reduce JWT lifetime from 7 days to 30 minutes; add 25-minute
periodic refresh interval in AuthProvider to keep active sessions alive
- H-2/H-6: require currentPassword verification before allowing email
or password changes in patchUserInfo
- H-5: fix brute force protection anchor point — compare oldest of the
3 failed attempts against now() instead of the most recent attempt
- H-10: add @Size constraints to NoteRequest, NotePatchRequest,
TaskRequest, TaskPatchRequest; add migration restoring CHECK constraint
on notes.description (max 5000 chars)
- M-2: catch JwtException supertype instead of only MalformedJwtException
so expired/invalid tokens return empty instead of throwing 500
- M-3: change anyRequest().permitAll() to denyAll() in SecurityConfig so
future endpoints are denied by default
- M-8: increase BCrypt cost factor from 10 to 12 per OWASP recommendation
- M-14/M-15: set include-message: never and log level INFO for all profiles
Deferred to separate PR: CR-8 (JWT HttpOnly cookie) — requires
coordinated CORS/cookie-domain config decision for the production domain
topology and coordinated backend + frontend changes.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-29 19:38:07 +02:00
rmcampos
06fc1a432e
chore: address security items
2026-06-29 19:28:18 +02:00
rmcampos
a55a80e916
chore: bump frontend dependencies ( #3 )
...
Main CI-Frontend / Build & Push (push) Successful in 32s
## What
- Bump frontend dependencies;
- Backend dependencies are not ready yet. Only Spring has a new version, but it is failing to run on GraalVM;
## Why
- Codebase hygiene;
## Mood
<img width="200" src="https://media0.giphy.com/media/Pn5crrMQi6WyI5tyI0/giphy.gif?cid=36b14fackrjl2p912ox9mnnn7m0rawm1okm5d8hnaorntlgn&ep=v1_gifs_trending&rid=giphy.gif&ct=g "/>
Reviewed-on: #3
2026-06-25 00:16:35 +00:00
rmcampos
6272650ef9
revert 54eeb66f0d
...
revert Update README.md
2026-06-17 17:43:18 +00:00
rmcampos
54eeb66f0d
Update README.md
2026-06-17 17:42:02 +00:00
rmcampos
a9f2b7b3a4
docs: upadte readme
2026-06-17 12:15:45 -03:00
rmcampos
d6a7ee34ef
docs: update changelog
2026-06-15 19:07:26 -03:00
gitea-actions[bot]
ce76f94237
chore: bump api version to 32 [skip ci]
2026-06-15 21:55:02 +00:00
rmcampos
68f8000ed8
fix: main workflow files
Main CI-Frontend / Build & Push (push) Successful in 29s
Main CI-Backend / Build & Push (push) Successful in 4m5s
2026-06-15 18:54:19 -03:00
gitea-actions[bot]
10c11e8f0b
chore: bump api version to 31 [skip ci]
2026-06-15 21:41:06 +00:00
rmcampos
0a35bc0f77
fix: docker tag for backend main
Main CI-Backend / Build & Push (push) Failing after 44s
2026-06-15 18:40:26 -03:00
gitea-actions[bot]
31b2c9da8e
chore: bump api version to 30 [skip ci]
2026-06-15 21:36:31 +00:00
rmcampos
17bcdd53bf
fix: checkout code for pushing changes using pat
Main CI-Backend / Build & Push (push) Failing after 39s
2026-06-15 18:35:48 -03:00
rmcampos
10e0bba9fb
chore: bump backend spring version and fix gitea files ( #2 )
...
Main CI-Frontend / Build & Push (push) Successful in 57s
Main CI-Backend / Build & Push (push) Failing after 36s
# What
- Bumps backend dependencies, including Spring Boot to v4.1.0
# Why
- Service hygiene.
Reviewed-on: #2
2026-06-15 21:16:14 +00:00
rmcampos
b93caa1397
feat: update main workflow files wih right changes
2026-06-15 16:11:22 -03:00
github-actions[bot]
894aec1ff7
docs: promote [Unreleased] to app-v2026.06.08.22 [skip ci]
2026-06-08 21:57:44 +00:00
rmcampos and GitHub
93efe09407
chore: bump client dependencies ( #64 )
...
* chore: bump client dependencies
* docs: update changelog file
* docs: update changelog
* feat: craete separate changelog files
2026-06-08 18:57:05 -03:00
rmcampos
a88a6788c6
feat: add script to set confirmation email locally
2026-06-08 17:47:14 -03:00
rmcampos
ae24edfa2a
chore: update docker files to use local user
2026-06-08 17:46:54 -03:00
rmcampos
01577a773a
docs: update changelog with latest changes
2026-06-08 17:46:32 -03:00
rmcampos and GitHub
931e361836
feat: update about page to reflect current features ( #63 )
2026-06-08 15:35:43 -03:00
rmcampos
db0cdeda91
docs: add changelog file
2026-06-08 13:38:04 -03:00
github-actions[bot]
4d9b3e2986
chore: bump api version to 29 [skip ci]
2026-06-01 14:42:27 +00:00
rmcampos and GitHub
bceb9a2e49
chore: bump backend and frontend dependencies ( #61 )
...
* chore: bump frontend dependencies
* chore: bump backend dependencies
2026-06-01 11:41:53 -03:00
github-actions[bot]
39cbe80582
chore: bump api version to 28 [skip ci]
2026-05-26 14:58:43 +00:00
rmcampos and GitHub
5fec30fea0
feat: add SDD and DDD filer for AI based development and Spec 001 implementation ( #60 )
...
* feat: add initial files and spec 1
* feat: add spec for rich text feature
* chore: restore file from broken AI session
* feat: add project constraints to ai
* chore: update spec feature prompt
* feat: add multiple tags support - wip
* test: fix test cases
* chore: move tag list to below the inputs
* chore: add ngrok files and updates
* fix: session issues and query using HQL
* test: fix test cases
2026-05-26 11:58:04 -03:00
github-actions[bot]
a35c037f20
chore: bump api version to 27 [skip ci]
2026-05-19 01:27:08 +00:00
f34c359720
Refresh auth session with server-authoritative current user data ( #59 )
...
* Initial plan
* feat: refresh and reload current user profile
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/3f01367a-baee-4bbe-8f66-f04da58d485f
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* test: fix time zone test issue
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
Co-authored-by: Ricardo Campos <ricardompcampos@gmail.com >
2026-05-18 22:26:31 -03:00
github-actions[bot]
1bb59dcbc5
chore: bump api version to 26 [skip ci]
2026-05-18 20:15:27 +00:00
a6bdd104d5
feat: add last activity date time ( #57 )
...
* feat: add last activity date time
* chore: update missing files
* chore: improve last seen message to inclute timezone
* chore: remove the formatting from backend
* chore: fix client issues
* fix: add utd to formatting in the client
* fix lint issue
* chore: fix lastLogin always showing the current login
* fix: address sidebar and sign-in review comments
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/04a13c25-87ea-44cc-ac53-cfefd16e0262
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
2026-05-18 17:15:01 -03:00
github-actions[bot]
9bf0f400fe
chore: bump api version to 25 [skip ci]
2026-05-17 20:54:25 +00:00
rmcampos and GitHub
84f6a00572
feat: prevent user form login before conforming his email ( #56 )
...
* feat: prevent user form login before conforming his email
* chore: update files and improve things
* feat: fix errors issue and improve logs
2026-05-17 17:53:59 -03:00
github-actions[bot]
638eeb077f
chore: bump api version to 24 [skip ci]
2026-05-15 17:45:37 +00:00
rmcampos and GitHub
d6cb1e9595
fix: mailgun 401 error ( #55 )
2026-05-15 14:45:09 -03:00
rmcampos
dbf43792ad
feat: add tools and redirect yaml service
2026-05-15 18:24:28 +02:00
rmcampos and GitHub
23cd481dfb
Add Traefik middleware and ingress for redirection
2026-05-15 12:33:34 -03:00
rmcampos and GitHub
793639cc98
fix: add new domain allowed ( #54 )
2026-05-15 12:04:29 -03:00
rmcampos
391e321c15
fix: terraform fmt
2026-05-15 16:57:47 +02:00
rmcampos
e1819f1b36
feat: move new domain to VPS
2026-05-15 16:56:04 +02:00
github-actions[bot]
84ce281f7f
chore: bump api version to 23 [skip ci]
2026-05-14 16:32:37 +00:00
rmcampos and GitHub
9d29e4f9a4
feat: update to new domain ( #53 )
...
* feat: update to new domain
* feat: add yml files to track changes in server
2026-05-14 13:31:10 -03:00
rmcampos and GitHub
3942d02225
Feat/drop refresh token logic ( #51 )
...
* feat: update auth provider to not refresh token every 2 minutes
* chore: ignore tfplan files
2026-05-13 18:11:35 -03:00
github-actions[bot]
edc83493c3
chore: bump api version to 22 [skip ci]
2026-05-13 20:54:30 +00:00
rmcampos
4d8b393b9d
feat: add tf file for GCP
2026-05-13 18:43:35 +02:00
rmcampos and GitHub
c2ba691b5e
chore: bump dependencies ( #49 )
...
* feat: bump client deps
* feat: replace eslint-plugin-import by eslint-plugin-import-x
2026-05-11 19:03:43 -03:00
rmcampos and GitHub
ff58a61ce9
feat: add scheduled backups ( #48 )
...
* feat: add scheduled backups
* Rename Kubernetes cron job resource for tasknote DB
2026-05-07 17:01:11 -03:00
4b87a35a7d
Add Cypress E2E tests for Home, Task, and Notes management ( #46 )
...
* Initial plan
* feat: add Cypress E2E tests for home, tasks, and notes management
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/b58034df-7cc2-4f3b-aebb-6ff9b948d992
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* fix: add data-testid to task dropdown and update Mark as Done tests
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/05bf3f86-5dda-4c1a-9f2b-dc1f0e38c9f3
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* fix: remove pre-click reload intercepts that caused share test race condition
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/a78336f4-bd41-4819-a848-79aa6a4f8ed7
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* fix: remove post-action reload intercepts that caused getDoneTasks race condition
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/28155c26-3eaf-46d7-a749-74eff1bc217b
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
2026-05-07 14:26:19 -03:00
662d8ba4d2
fix: prevent premature route resolution before initial auth check completes ( #45 )
...
* Initial plan
* fix: add loading state to AuthContext to prevent premature route resolution
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/8b02c4fd-b37e-4d34-8910-6d075bde6b4b
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* restore: revert package-lock.json to original state
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* fix: add catch before finally in initial auth check useEffect
Agent-Logs-Url: https://github.com/RMCampos/tasknote/sessions/8b02c4fd-b37e-4d34-8910-6d075bde6b4b
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
* test: address test warning missing act
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RMCampos <2219519+RMCampos@users.noreply.github.com >
Co-authored-by: Ricardo Campos <ricardompcampos@gmail.com >
2026-05-07 11:54:21 -03:00
rmcampos
