schalli
ac617f4fe5
feat(02-03): password reset flow, force-change interceptor, MailModule
...
- MailModule with SMTP transport configured from ENV variables
- MailService for password reset and welcome emails (plain text, i18n)
- Password reset flow: request-reset (public), reset-password (token-based)
- Change password for logged-in users with current password verification
- Admin reset password endpoint (ADMIN/SUPER_ADMIN only, D-03)
- ForcePasswordChangeInterceptor blocks all routes except change-password,
logout, me when mustChangePassword=true (D-06, Pitfall 5)
- Frontend: reset-password request page, token reset page, change-password page
- Forgot password link added to login page
- MailHog service added to docker-compose.dev.yml for dev email testing
- SMTP env vars added to docker-compose.yml (defaults to MailHog)
- Complete DE/EN i18n coverage for reset and change password flows
- SUS packages installed: @nestjs-modules/mailer, nodemailer, ldapts
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-18 13:48:23 +02:00
schalli
bfb04eac66
feat(02-02): user CRUD API + admin page, tenant CRUD API + admin page
...
- Create UserController with GET/POST/PATCH/DELETE endpoints at /users
- ADMIN sees own-tenant users only; SUPER_ADMIN sees all (T-02-10)
- ADMIN cannot escalate to SUPER_ADMIN role (T-02-08)
- ADMIN cannot delete self or cross-tenant users
- Create TenantController with GET/POST/PATCH/DELETE at /tenants
- SUPER_ADMIN-only access (D-10)
- Tenant deletion blocked if active users exist (T-02-09)
- Create CreateUserDto, UpdateUserDto, CreateTenantDto with class-validator
- Create admin/users page with user table, create/edit/delete modals
- Create admin/tenants page with tenant table, create/edit/deactivate (SUPER_ADMIN only)
- Add admin section to sidebar: Verwaltung > Benutzer + Mandanten
- Verwaltung visible for ADMIN/SUPER_ADMIN; Tenants link SUPER_ADMIN only
- Install @nestjs/mapped-types for PartialType DTO pattern
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-18 13:38:54 +02:00
schalli
cdf4d60038
feat(02-02): auth infrastructure -- route groups, middleware, session, auth-actions, auth store
...
- Create (auth) route group with standalone layout (no sidebar/header, D-04)
- Create (portal) route group wrapping children with AppShell
- Move dashboard page into (portal) route group
- Add Next.js middleware for JWT-based route protection using jose
- Create session.ts with verifySession/getSessionFromCookies helpers
- Create auth-actions.ts server actions: login, logout, fetchCurrentUser
- Create Zustand auth-store for client-side user state
- Install jose and zod dependencies
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-18 13:32:53 +02:00
schalli