7 Commits

Author	SHA1	Message	Date
fs	d4978d1504	test(services): add 88 unit tests for 7 critical service classes ... RateLimiterServiceTest (17): hit/isBlocked/reset/registerFailure, fail-open, sliding window, scope normalization. PermissionServiceTest (24): userHas, getUserPermissions, cache hit/miss/refresh, clearUserCache, CRUD, system permission protection. RoleServiceTest (9): createFromAdmin, updateFromAdmin, deleteByUuid, Admin role protection, duplicate code rejection. TenantServiceTest (8): CRUD, department-dependent deletion blocking. DepartmentServiceTest (14): listPaged scope filtering, groupActiveByTenantIds, createFromAdmin, deleteByUuid, syncTenants. MailServiceTest (8): send logging, MailerException handling, template metadata. UserLifecycleServiceTest (8): advisory locking, deactivation, deletion, snapshot failure skip, privileged user exclusion, manual trigger type. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 13:57:54 +01:00
fs	892da0048d	refactor(arch): enforce gateway compliance and remove service-wrapping gateways	2026-03-13 11:31:33 +01:00
fs	01c05d997f	fix(security): enforce atomic role/permission writes and user assignment rollback	2026-03-09 19:54:58 +01:00
fs	11ca546eae	feat(security): add session timeout + transaction wrapping (B1) ... Session timeout: configurable idle (default 30min) and absolute (default 8h) timeouts via DB settings, enforced in web/index.php on every request. Timestamps set at login in action layer; graceful fallback for pre-existing sessions. Transaction wrapping: UserAccountService.createFromAdmin/register, roles create/edit, and permissions edit now wrap multi-step DB operations in transactions to guarantee atomicity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 19:16:26 +01:00
fs	9a08f96c11	agent foundation	2026-03-06 00:44:52 +01:00
fs	8f4dd5840d	major update	2026-03-04 15:56:58 +01:00
fs	99db252f60	instances added god may help	2026-02-23 12:58:19 +01:00