Marcel e89dd5dc3c docs: document why CSRF is intentionally disabled in SecurityConfig ...

The previous comment implied CSRF was disabled as a temporary dev
convenience. Replaced it with an explanation of why it is safe with
the current Authorization-header-based auth scheme, and added a
clear note on when it must be re-enabled.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 12:27:50 +01:00

.devcontainer

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

.vscode

init

2025-12-15 19:06:22 +00:00

backend

docs: document why CSRF is intentionally disabled in SecurityConfig

2026-03-15 12:27:50 +01:00

docs

fix: correct malformed @Value annotations in DataInitializer

2026-03-15 12:16:00 +01:00

frontend

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

scripts

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

.gitignore

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

CLAUDE.md

fix: correct malformed @Value annotations in DataInitializer

2026-03-15 12:16:00 +01:00

docker-compose.yml

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

Description

No description provided

44 MiB

Languages

Python 73.1%

TypeScript 11.5%

Java 10.9%

Svelte 4.2%

Shell 0.1%