Marcel Raddatz a52b0a9d24 feat(planning): enforce planner role on slot mutation endpoints ...

PATCH, DELETE, and POST slot endpoints now return 403 Forbidden
when called by a household member.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-08 22:34:28 +02:00

..

admin

Remove service interfaces — use concrete classes directly

2026-04-02 11:04:41 +02:00

auth

refactor(auth): add comments, clearContext on logout, explain session auth

2026-04-02 18:52:16 +02:00

common

fix(security): use generic forbidden message to avoid leaking required role

2026-04-06 19:46:24 +02:00

household

Remove service interfaces — use concrete classes directly

2026-04-02 11:04:41 +02:00

pantry

Remove service interfaces — use concrete classes directly

2026-04-02 11:04:41 +02:00

planning

feat(planning): enforce planner role on slot mutation endpoints

2026-04-08 22:34:28 +02:00

recipe

feat(auth): add @RequiresHouseholdRole annotation with interceptor

2026-04-04 18:22:47 +02:00

shopping

fix(security): add @Valid constraints on AddItemRequest to prevent oversized input

2026-04-06 19:49:06 +02:00

BackendApplication.java

Scaffold Spring Boot 4.0.5 project with domain packages

2026-04-01 20:54:18 +02:00