ObsiGate

6 Commits

Include renames

Author	SHA1	Message	Date
bruno	33fe1a3439	feat: ordre naturel des sections Configurations et avatar utilisateur #113 CI / lint (push) Successful in 1m59s Details CI / security (push) Successful in 1m28s Details CI / test (push) Successful in 4m14s Details CI / build (push) Successful in 1m20s Details CI / e2e (push) Successful in 13m43s Details	2026-09-23 22:18:29 -04:00
bruno	162a5b4acc	fix(security): consolidation & securite phase 1 (#84 , BUG-021 a BUG-034) CI / lint (push) Successful in 1m20s Details CI / security (push) Successful in 47s Details CI / test (push) Successful in 2m21s Details CI / build (push) Successful in 43s Details CI / e2e (push) Successful in 10m48s Details - sanitizer XSS serveur (markdown + page de partage) [BUG-021/022] - rate-limit/lockout MFA [BUG-023] - isolation vaults par segments [BUG-024] - caps regex ReDoS [BUG-025] - SSRF webhooks + secrets externalises [BUG-026] - rotation/revocation des jetons [BUG-027] - politique de mot de passe + invalidation sessions [BUG-028] - verrous users.json [BUG-029] - IP reelle dans les audits [BUG-030] - rate-limit par compte [BUG-031] - symlinks hors vault ignores [BUG-032] - recherche simple via inverted index [BUG-033] - token en memoire + cookie HttpOnly, CSP durcie [BUG-034] Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.	2026-09-13 10:51:42 -04:00
bruno	1673531b43	fix: resolve all CI lint and security issues CI / lint (push) Failing after 9s Details CI / test (push) Has been skipped Details CI / build (push) Has been skipped Details CI / e2e (push) Has been skipped Details CI / security (push) Failing after 12s Details - ruff: 602→0 errors (428 auto-fixed, pyproject.toml ignores for FastAPI patterns) - bandit: skip B310 (urllib for vault file access is intentional) - Fixed SIM118 (dict.keys()→dict), PERF102, SIM113, SIM117 - Created pyproject.toml with ruff + bandit config - 285 tests still pass	2026-07-24 10:38:44 -04:00
bruno	2de9f91671	feat: server-side language preference — survives clear site data CI / lint (push) Failing after 24s Details CI / test (push) Has been skipped Details CI / build (push) Has been skipped Details CI / e2e (push) Has been skipped Details CI / security (push) Failing after 10s Details Problem: language preference stored only in localStorage, lost on 'clear site data'. French users with browser lang=fr always got French UI even when profile was English. Solution: - Backend: add 'language' field to user profile (default 'fr') - Backend: PATCH /api/auth/me to update language preference - Frontend: initI18n() priority: server > localStorage > navigator > 'fr' - Frontend: initAuth() runs before initI18n() so server check works - Frontend: profile Save persists language to server via PATCH Verified: tabs show English after server profile set to 'en'	2026-06-21 10:29:51 -04:00
bruno	0bbd793e97	feat: Implement core Python FastAPI backend for user authentication, vault management, and file operations.	2026-03-27 10:11:43 -04:00
bruno	190f47f134	feat: Introduce a comprehensive authentication system, including user management, JWT handling, and initial frontend components with Docker support.	2026-03-23 15:44:37 -04:00