9 Commits

Author	SHA1	Message	Date
fs	f6777113ec	test(gateways): add 27 unit tests for 3 security-critical gateway classes ... AuthCryptoGatewayTest (10 tests): encrypt/decrypt round-trip, unique IVs, Crypto payload format verification (GR-SEC-005), error handling. SettingsCryptoGatewayTest (9 tests): interface compliance, round-trip, AES-256-GCM format, tampered ciphertext handling. OidcHttpGatewayTest (8 tests): success, 401/500, network error, malformed JSON. Plan amended: PermissionGateway removed (does not exist in codebase). SC-002 amended: payload format verification accepted as Crypto delegation proof. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 13:57:33 +01:00
fs	892da0048d	refactor(arch): enforce gateway compliance and remove service-wrapping gateways	2026-03-13 11:31:33 +01:00
fs	964c07a9de	feat(auth): add microsoft auto-remember policy with tenant override and configurable remember TTL	2026-03-10 22:48:10 +01:00
fs	792af5a532	feat(settings): add admin session policy management	2026-03-09 20:07:55 +01:00
fs	11ca546eae	feat(security): add session timeout + transaction wrapping (B1) ... Session timeout: configurable idle (default 30min) and absolute (default 8h) timeouts via DB settings, enforced in web/index.php on every request. Timestamps set at login in action layer; graceful fallback for pre-existing sessions. Transaction wrapping: UserAccountService.createFromAdmin/register, roles create/edit, and permissions edit now wrap multi-step DB operations in transactions to guarantee atomicity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 19:16:26 +01:00
fs	9a08f96c11	agent foundation	2026-03-06 00:44:52 +01:00
fs	8f4dd5840d	major update	2026-03-04 15:56:58 +01:00
fs	7b53faca37	bisschen tests fixen	2026-02-23 16:00:04 +01:00
fs	99db252f60	instances added god may help	2026-02-23 12:58:19 +01:00