Marcel 6c723aeb8c fix: remove spring-boot-starter-data-rest (security vulnerability) ...

Data REST was auto-exposing raw JPA repository endpoints (/appUsers,
/documents, /persons, /userGroups, etc.) that completely bypass the
@RequirePermission AOP checks — effectively making the entire database
readable and writable without authentication.

All API needs are covered by the custom controllers. The generated
api.ts is reverted to the stub until npm run generate:api is re-run
against the cleaned backend.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 14:22:41 +01:00

.devcontainer

fix: correct devcontainer workspace path mismatch

2026-03-15 13:44:06 +01:00

.vscode

fix: activate dev Spring profile in VS Code launch config

2026-03-15 14:17:07 +01:00

backend

fix: remove spring-boot-starter-data-rest (security vulnerability)

2026-03-15 14:22:41 +01:00

docs

fix: correct malformed @Value annotations in DataInitializer

2026-03-15 12:16:00 +01:00

frontend

refactor: migrate all page.server.ts files to typed API client

2026-03-15 13:39:15 +01:00

scripts

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

.gitignore

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

CLAUDE.md

fix: correct malformed @Value annotations in DataInitializer

2026-03-15 12:16:00 +01:00

docker-compose.yml

fix: correct devcontainer workspace path mismatch

2026-03-15 13:44:06 +01:00

Description

No description provided

44 MiB

Languages

Python 73.1%

TypeScript 11.5%

Java 10.9%

Svelte 4.2%

Shell 0.1%