golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,699 Commits 1 Branch 38 Tags
85f0814e0af6cd2637e53727d7f04524646b6313
Commit Graph

1699 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jakub Zych
85f0814e0a docs(phase-19.5): update tracking after wave 4 2026-10-21 02:15:44 +02:00
Jakub Zych
cdd647243c docs(19.5-04): complete unit tests, PHP map, security review and v0.1.1 plan 2026-10-21 02:15:06 +02:00
Jakub Zych
f38713f540 docs(19.5): close T-19.5-38 in the security review 2026-10-21 02:07:44 +02:00
Jakub Zych
1d5dc364dd test(19.5): gate TestPreAccountTakeover 2026-10-21 02:07:44 +02:00
Jakub Zych
cdddaa384f docs(phase-19.8): add pattern map 2026-10-21 02:07:08 +02:00
Jakub Zych
09fd4d0712 docs(phase-19.8): record post-research decisions D-23..D-30 2026-10-21 02:04:31 +02:00
Jakub Zych
e830298862 docs(19.5): security review and validation map 2026-10-21 01:35:09 +02:00
Jakub Zych
2c2ff81abd test(19.5): gate the PHP map 
- sociallogin: TestPHPMethodMap
- docker: the five TestPHP* ports and TestChangePassword (the user-plugin
  row of the map)
 2026-10-21 01:28:57 +02:00
Jakub Zych
52f17e41fc docs(19.5): capture the OAuth password-bootstrap todo 2026-10-21 01:28:24 +02:00
Jakub Zych
18598c17d7 test(19.5): gate the plugin unit tests 
- sociallogin: TestRegistry, TestNormalizeFrontendCallback,
  TestNormalizeReturnTo, TestCodes, TestEmailVerified, TestGothProviders,
  TestErrorMessages
- docker: the eighteen Postgres-backed plugin unit tests, TestNOAuth,
  TestRegisterComplete and TestStateCookie among them
 2026-10-21 01:21:10 +02:00
Jakub Zych
63a85a8a65 docs(phase-19.8): add research and validation strategy 2026-10-21 01:14:16 +02:00
Jakub Zych
6b8f0600c8 test(19.5): gate the framework and user-plugin unit tests 
- go: TestPullConcurrent, TestPullExpired, TestPullPrefixIsolation
- userplugin: TestOAuthProviders
- docker: TestPullDocker, TestOAuthIdentitiesDestroyRule,
  TestOAuthIdentitiesDestroyRace, TestRegisterUserPasswordLess,
  TestFinishLogin, TestRegistrationExports
 2026-10-21 00:51:25 +02:00
Jakub Zych
671d388ca1 test(cooler): Pull concurrency, expiry and prefix isolation 
- TestPullConcurrent: 64 concurrent Pulls of one key, one winner, 20 rounds,
  on memory and miniredis
- TestPullExpired: an expired value is never returned and is gone afterwards
- TestPullPrefixIsolation: Pull touches only its own <prefix>cache:<key>
- TestPullDocker: the same on redis:7-alpine (GETDEL)
 2026-10-21 00:45:33 +02:00
Jakub Zych
b4c0e0d2a2 test(19.5): fail-closed phase gate 
- scripts/check-phase19.5.sh: go, userplugin, sociallogin, demo, bm,
  fonoteka, docker and docs stages across six repositories
- go test -json detector fails on a failed, skipped, missing or zero test;
  vitest detector requires oauth.test.ts and refuses skips
- additive user-plugin check against 4c5d3b8 and no updates/ change (D-22)
- --self-test proves the detectors and the docker NOT RUN rule
 2026-10-21 00:38:55 +02:00
Jakub Zych
bc5a9dbc17 docs(19.8): capture phase context 2026-10-21 00:36:29 +02:00
Jakub Zych
877bf0a425 docs(phase-19.5): update tracking after wave 3 
Claude-Session: https://claude.ai/code/session_01Wz3g1um1sz68zQJLpui4Qk
 2026-10-21 00:30:31 +02:00
Jakub Zych
0a87d64d4e docs(19.5-03): complete adoption plan 
sm-sociallogin-plugin mounted in sm-demo-app and sm-bm-app (Microsoft 365
with the frontend callback, consent and link-ticket views), fonoteka.go
pinned to sm-user-plugin v0.1.4. User setup for the Entra registration;
one unrelated fonoteka route-inventory failure deferred.
 2026-10-21 00:30:00 +02:00
Jakub Zych
7f7f5fc171 docs(phase-19.5): update tracking after wave 2 
Claude-Session: https://claude.ai/code/session_01Wz3g1um1sz68zQJLpui4Qk
 2026-10-21 00:07:56 +02:00
Jakub Zych
ecc77a3f6b docs(19.5-02): complete social sign-in plugin plan 
- sm-sociallogin-plugin v0.1.0 (private repo), pinned to summercms v0.3.1
  and sm-user-plugin v0.1.4, all pushed and tagged in D-21 order
- v0.3.1 changelog posted after the User-Agent fix (fix-ua)
 2026-10-21 00:07:28 +02:00
Jakub Zych
c996790808 docs(roadmap): renumber console commands overhaul from phase 32 to 19.8 2026-10-21 00:01:24 +02:00
Jakub Zych
5cf5c4f0dc docs(roadmap): add phase 32 console commands overhaul v0.3.1 2026-10-20 23:58:13 +02:00
Jakub Zych
c4e5fef492 docs(phase-19.5): update tracking after wave 1 
Claude-Session: https://claude.ai/code/session_01Wz3g1um1sz68zQJLpui4Qk
 2026-10-20 23:31:20 +02:00
Jakub Zych
bda982c05b docs(19.5-01): complete social sign-in foundations plan 
- goth v1.82.0 package check approved (Task 4 reply recorded)
- commits, exported identifiers for plan 02, Docker test runs, deviations

Claude-Session: https://claude.ai/code/session_01Wz3g1um1sz68zQJLpui4Qk
 2026-10-20 23:30:54 +02:00
Jakub Zych
464f7fa0bb docs(19.5): close user-plugin console database todo 2026-10-20 23:07:22 +02:00
Jakub Zych
5e0a04e4da feat(cooler): Cache.Pull returns and removes a value atomically 
- Cache.Pull(ctx, key) ([]byte, bool, error), Laravel's Cache::pull
- Redis driver runs GETDEL (Redis 6.2+); memory driver uses otter Compute
  with InvalidateOp under the per-key lock; expired keys report not found
- TestPullSmoke over the memory driver and miniredis, ExampleCache_Pull
- README and docs/services/caching.md ("One-time values")
 2026-10-20 22:58:44 +02:00
Jakub Zych
26ebb6c98c docs(19.5): decide goth for social sign-in 2026-10-20 22:55:08 +02:00
Jakub Zych
c1ae1bb571 docs(todos): link the purge-env consumer todo to g15office az6inuma 2026-10-20 22:48:48 +02:00
Jakub Zych
4270d05f18 docs(quick-261020-sdt): summary of the purge token rename and rotation 
The layers read NUXT_CACHE_PURGE_TOKEN and strip the purge keys from
nuxt-site-config; demo.summercms.io and summercms.io/changelog run the
fixed builds with rotated tokens (check-live ok, 0 purge keys live).
 2026-10-20 22:47:52 +02:00
Jakub Zych
95ae878bd3 docs(todos): purge token rename follow-up for grzybyfunkcjonalne 2026-10-20 21:14:35 +02:00
Jakub Zych
fd20fc97e4 docs(cooler): the site's purge token variable is NUXT_CACHE_PURGE_TOKEN 2026-10-20 21:14:09 +02:00
Jakub Zych
8f10e8e524 docs(quick-261020-sdt): plan purge token rename and rotation 2026-10-20 20:43:11 +02:00
Jakub Zych
0ea00fee1f test(19.4.1): persist human verification items as UAT 2026-10-20 20:21:21 +02:00
Jakub Zych
9f65186d42 docs(19.4.1): add phase verification report 2026-10-20 20:20:55 +02:00
Jakub Zych
a4c94d126f docs(19.4.1): record plan 05 progress 2026-10-20 20:11:22 +02:00
Jakub Zych
35d31569b5 docs(19.4.1-05): complete unit tests, phase gate and live verification plan 2026-10-20 20:11:10 +02:00
Jakub Zych
a8f0122041 docs(todos): close journal-author-profile-fields; reload-on-deploy progress from Phase 19.4.1 2026-10-20 19:28:17 +02:00
Jakub Zych
07f2fb2386 docs(19.4.1): record plan 04 progress 
- 19.4.1 plans 4/5, plan 04 checked off
 2026-10-20 18:59:01 +02:00
Jakub Zych
f4bebeb591 docs(19.4.1-04): complete presentations, phone remote and quizzes plan 2026-10-20 18:58:50 +02:00
Jakub Zych
cba0a98326 docs(19.4.1): record plan 03 progress; the admin is public behind a login 
- 19.4.1 plans 3/5, plan 03 checked off
- phase goal: the admin is at /smbackend, login required, credentials on request
 2026-10-20 16:33:08 +02:00
Jakub Zych
4964d4d65b docs(19.4.1-03): complete accounts, tour, EN/PL, journal and contact plan 2026-10-20 16:32:54 +02:00
Jakub Zych
d04462a224 docs(19.4.1): record plan 02 progress 2026-10-20 14:42:14 +02:00
Jakub Zych
e2a1afdd06 docs(19.4.1-02): complete release and live tracer plan 2026-10-20 14:41:42 +02:00
Jakub Zych
cb0e287757 docs(19.4.1): record plan 01 progress 2026-10-20 11:43:55 +02:00
Jakub Zych
9db4f4d661 docs(19.4.1-01): complete roadmap and sales deck plan 2026-10-20 11:43:22 +02:00
Jakub Zych
e4ed78773e wip: phase 19.4.1 paused at plan 01 task 4/4 (deck review checkpoint) 2026-10-20 11:22:00 +02:00
Jakub Zych
31764c8d8c docs(19.4.1): record phase planned 2026-10-20 03:33:29 +02:00
Jakub Zych
2b5f0b2c92 docs(19.4.1): mark research open questions resolved 2026-10-20 03:32:45 +02:00
Jakub Zych
ae81df3f4e docs(19.4.1): create phase plan 2026-10-20 03:30:50 +02:00
Jakub Zych
8c01e41297 docs(quick-261020-42e): branded HTML error pages for browsers 2026-10-20 03:17:09 +02:00
Jakub Zych
a34c251b0b test(surf): cover error page negotiation, unchanged API bodies and overrides 
Negotiation table (Sec-Fetch-Mode, X-Requested-With, Accept q values, the
32-range cap, /api, /_ and admin paths), byte equality with the
http.error_pages.enabled false router for curl, fetch, XHR and JSON
clients, page content and headers for every covered status, details
gating and escaping, renderer override and fallbacks, the admin prefix
and the uploads route.
 2026-10-20 03:15:26 +02:00