5 Commits

Author	SHA1	Message	Date
fs	56c3e30f43	Strengthen service workflow tests	2026-03-19 20:28:04 +01:00
fs	892da0048d	refactor(arch): enforce gateway compliance and remove service-wrapping gateways	2026-03-13 11:31:33 +01:00
fs	01c05d997f	fix(security): enforce atomic role/permission writes and user assignment rollback	2026-03-09 19:54:58 +01:00
fs	11ca546eae	feat(security): add session timeout + transaction wrapping (B1) ... Session timeout: configurable idle (default 30min) and absolute (default 8h) timeouts via DB settings, enforced in web/index.php on every request. Timestamps set at login in action layer; graceful fallback for pre-existing sessions. Transaction wrapping: UserAccountService.createFromAdmin/register, roles create/edit, and permissions edit now wrap multi-step DB operations in transactions to guarantee atomicity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 19:16:26 +01:00
fs	9a08f96c11	agent foundation	2026-03-06 00:44:52 +01:00