Paul Nothaft cbde7636aa Merge remote-tracking branch 'origin/main' into feat/oidc-sso-phase1 ...

# Conflicts:
#	backend/src/middleware/maintenance.js

2026-07-16 13:53:28 +02:00

..

__tests__

Merge remote-tracking branch 'origin/main' into feat/oidc-sso-phase1

2026-07-16 13:53:28 +02:00

assets/fonts

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

docs

…

migrations

fix(oidc): security + robustness hardening from codex review rounds 1-2

2026-07-16 09:41:48 +02:00

scripts

feat(auth): admin TOTP MFA — enrollment, login challenge, recovery, CLI reset

2026-07-03 11:33:38 +02:00

src

Merge remote-tracking branch 'origin/main' into feat/oidc-sso-phase1

2026-07-16 13:53:28 +02:00

.dockerignore

…

.env.example

feat(auth): admin TOTP MFA — enrollment, login challenge, recovery, CLI reset

2026-07-03 11:33:38 +02:00

.eslintrc.js

…

audit-backend.json

…

dependencies-backend.json

Upgrade nodemailer to 7.0.7 (GHSA-mm7p-fcc7-pg87)

2025-10-13 21:11:38 +02:00

Dockerfile

chore(security): close 21 frontend image CVEs — nginx 1.30 base + apk cache-bust

2026-07-16 10:29:31 +02:00

Dockerfile.dev

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

ecosystem.config.js

…

jest.config.js

…

jest.setup.js

…

knexfile.js

…

package-lock.json

feat(auth): OIDC SSO for admin users — phase 1 (#798)

2026-07-16 08:54:26 +02:00

package.json

Merge remote-tracking branch 'origin/main' into feat/oidc-sso-phase1

2026-07-16 13:53:28 +02:00

server.js

feat(setup): validate setup token at step 1 before advancing

2026-07-02 15:18:22 +02:00

test-filter.js

…

wait-for-db.sh

feat: zero-config first run — in-browser admin bootstrap + auto-generated secrets

2026-07-01 14:49:18 +02:00