9 Commits

Include renames

Author	SHA1	Message	Date
bruno	1673531b43	fix: resolve all CI lint and security issues ... - ruff: 602→0 errors (428 auto-fixed, pyproject.toml ignores for FastAPI patterns) - bandit: skip B310 (urllib for vault file access is intentional) - Fixed SIM118 (dict.keys()→dict), PERF102, SIM113, SIM117 - Created pyproject.toml with ruff + bandit config - 285 tests still pass	2026-07-24 10:38:44 -04:00
bruno	2de9f91671	feat: server-side language preference — survives clear site data ... Problem: language preference stored only in localStorage, lost on 'clear site data'. French users with browser lang=fr always got French UI even when profile was English. Solution: - Backend: add 'language' field to user profile (default 'fr') - Backend: PATCH /api/auth/me to update language preference - Frontend: initI18n() priority: server > localStorage > navigator > 'fr' - Frontend: initAuth() runs before initI18n() so server check works - Frontend: profile Save persists language to server via PATCH Verified: tabs show English after server profile set to 'en'	2026-06-21 10:29:51 -04:00
bruno	83279b536f	fix: logout supprime access_token cookie + bouton toujours visible ... - Backend: delete_cookie access_token (/) + refresh_token - Logout ne requiert plus auth (graceful si token expire) - Bouton Deconnexion toujours visible dans le menu	2026-06-16 12:43:50 -04:00
bruno	1a14927f36	fix: resolve all 28 mypy type errors + re-enable coverage in CI	2026-05-28 12:57:30 -04:00
bruno	6fc43e2485	fix: ruff lint errors + bandit false positives + pip-audit non-blocking	2026-05-28 12:41:31 -04:00
bruno	2469026c1d	fix: login endpoint - request variable shadowing Starlette Request ... The login() function used 'request: LoginRequest' which shadowed FastAPI's Starlette Request object. Request.client was accessed on the LoginRequest Pydantic model instead of the HTTP request, causing AttributeError: 'LoginRequest' object has no attribute 'client'. Fix: rename the Pydantic parameter to 'body' and add explicit 'request: Request' for IP extraction and rate limiting.	2026-05-27 21:16:11 -04:00
bruno	482937fb30	Add audit logging, rate limiting, secret redactor, and backlinks ... Implement several security and feature improvements across the backend and frontend: - New IP-based rate limiter for authentication endpoints - New audit logging system for sensitive operations - New secret redactor to mask sensitive patterns in rendered content - Configurable token TTL and IGNORED_DIRS via environment variables - Add backlink index and API endpoint - Add preview tab support with single/double-click behavior in tree - Add file backup before write/delete operations	2026-05-26 10:27:00 -04:00
bruno	46e054f5dd	feat: Introduce core backend application with authentication API and a new popout HTML page.	2026-03-24 09:51:38 -04:00
bruno	190f47f134	feat: Introduce a comprehensive authentication system, including user management, JWT handling, and initial frontend components with Docker support.	2026-03-23 15:44:37 -04:00