Marcel Raddatz 0b182a33fd refactor(auth): extract authenticateInSession to AuthService ...

Remove duplicated private authenticateInSession from AuthController and
HouseholdController. Add a single public implementation on AuthService
with session fixation protection built in. HouseholdController now
injects AuthService and passes role "user" for invite-accepted accounts.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-10 22:24:58 +02:00

..

admin

Remove service interfaces — use concrete classes directly

2026-04-02 11:04:41 +02:00

auth

refactor(auth): extract authenticateInSession to AuthService

2026-04-10 22:24:58 +02:00

common

fix(security): use generic forbidden message to avoid leaking required role

2026-04-06 19:46:24 +02:00

household

refactor(auth): extract authenticateInSession to AuthService

2026-04-10 22:24:58 +02:00

pantry

Remove service interfaces — use concrete classes directly

2026-04-02 11:04:41 +02:00

planning

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

recipe

feat(backend): add heroImageUrl and tags to RecipeSummaryResponse

2026-04-10 12:03:03 +02:00

shopping

fix(security): add @Valid constraints on AddItemRequest to prevent oversized input

2026-04-06 19:49:06 +02:00

BackendApplication.java

Scaffold Spring Boot 4.0.5 project with domain packages

2026-04-01 20:54:18 +02:00