schalli 7704372c3c feat(260923-lrr): API — Favoriten-Symbol hochladen, Vorrang, Versionszaehler, Abrufprobe ...

- FavoriteLink: neue Spalten uploadedIconMime/iconVersion (Migration 20260923160000)
- favorite-icon-files.ts: Erkennung PNG/JPEG/GIF/WebP/ICO/SVG, Pfadbildung ohne
  Byte aus der Anfrage im Pfad (T-LRR-01), best-effort Dateientfernung
- FavoritesService: uploadIcon/removeUploadedIcon, Vorrang der hochgeladenen
  Datei in getIconBytes, Abrufprobe fuer eine neue iconUrl (422 statt stiller
  Speicherung), iconVersion-Erhoehung bei jeder Aenderung der Symbolquelle
- FavoritesController: POST/DELETE /favorites/:id/icon, Cache-Control private
- T-LRR-07 (Restrisiko aus dem Plan-Threat-Model geschlossen, ueber den Plan
  hinaus): DashboardService.removeWidget/deleteDashboard raeumen jetzt die
  Symboldateien der per Datenbank-Kaskade mitgeloeschten Favoriten auf
  (best effort, nie blockierend)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-23 16:04:29 +02:00

..

20260618112124_auth_multi_tenancy

feat(02-01): Prisma schema expansion, RLS migration, and PrismaModule

2026-06-18 13:22:38 +02:00

20260618112133_rls_policies

feat(02-01): Prisma schema expansion, RLS migration, and PrismaModule

2026-06-18 13:22:38 +02:00

20260619103242_add_module_registry

feat(03-01): add Module SDK package and Prisma module registry schema

2026-06-19 12:33:55 +02:00

20260629130000_add_missing_tables

chore(db): add migration for all tables missing from history

2026-06-29 15:17:27 +02:00

20260630095533_add_user_avatar

feat(quick-260630-gbh-01): avatar storage endpoints + enriched /auth/me

2026-06-30 11:57:33 +02:00

20260702000000_add_user_accent_color

fix(db): make accentColor migration idempotent with IF NOT EXISTS

2026-07-02 10:47:00 +02:00

20260707090000_add_ldap_group_filter

feat(ldap): add groupFilterDns column for selective import filter

2026-07-07 09:34:27 +02:00

20260708090000_add_favorite_link

fix(db): add missing FavoriteLink migration

2026-07-08 09:16:15 +02:00

20260708130000_ldap_anonymous_bind

feat(ldap): support anonymous bind (no bind DN/password required)

2026-07-08 12:57:26 +02:00

20260709000000_lowercase_usernames

fix(auth): make usernames case-insensitive

2026-07-09 15:20:49 +02:00

20260714090000_add_ldap_user_exclude_list

feat(ldap): per-user exclude/denylist filter for sync

2026-07-14 09:34:01 +02:00

20260721120000_add_tender_radar

feat(10-01): add Tender/TenderSourcePollConfig models + ingestion packages

2026-07-21 10:33:24 +02:00

20260721140000_tender_bundesland_backfill

feat(11-02): normalizer derives bundesland + backfill migration for existing rows

2026-07-21 16:01:32 +02:00

20260721150000_tender_cpv_divisions_backfill

feat(11-03): cpvDivisions column — normalizer + backfill migration

2026-07-21 16:11:40 +02:00

20260721160000_add_tender_triage

test(11-05): add failing TenderTriageService spec + TenderTriage schema/migration

2026-07-21 16:28:38 +02:00

20260721170000_add_tender_saved_search

feat(11-06): TenderSavedSearch model + CRUD service (FILTER-06)

2026-07-21 16:45:04 +02:00

20260722100000_add_tender_notifications

feat(12-01): add TenderMatch/TenderNotificationPref schema + apply migration

2026-07-22 09:02:18 +02:00

20260722180000_ldap_tls_reject_unauthorized

feat(ldap): opt-in skip TLS verification for ldaps (internal CA)

2026-07-22 14:18:55 +02:00

20260723111946_add_rss_feed_source_and_poll_granularity

feat(14-02): add TenderRssFeedSource CRUD, tick poll gate, and wire RssAdapter

2026-07-23 13:24:36 +02:00

20260723113917_tender_email_config_owner_tenant_id

feat(14-03): add per-tenant encrypted TenderEmailConfig + ownerTenantId write-side (D-13)

2026-07-23 13:45:11 +02:00

20260723120000_add_tender_source

feat(13-01): add TenderSource model + Tender.fingerprint, backfill 2851 rows

2026-07-23 08:38:26 +02:00

20260728134010_ldap_sync_interval_default_off

feat(260728-lih): default LDAP syncIntervalMin to 0 (auto-sync off)

2026-07-28 15:40:28 +02:00

20260804130130_add_groups_and_module_grants

feat(15-01): Group/GroupMembership/ModuleGrant schema + D-06 backfill migration

2026-08-04 15:03:48 +02:00

20260804130918_groups_rls_policies

feat(15-01): RLS policies for Group/GroupMembership/ModuleGrant (T-15-11)

2026-08-04 15:11:33 +02:00

20260806133916_add_group_internal_name_and_object_guid

feat(16-01): apply Group.internalName/ldapObjectGuid migration to local DB

2026-08-06 15:43:19 +02:00

20260811120000_doe_notice_url_backfill

fix(tenders): link DOE notices to the notice page, not the API

2026-08-11 13:45:04 +02:00

20260811140000_encrypt_ldap_bind_password

feat(ldap): encrypt the bind password at rest

2026-08-11 14:10:52 +02:00

20260812100000_tender_email_config_per_user

feat(17-01): move TenderEmailConfig ownership from tenant to user

2026-08-12 11:19:55 +02:00

20260812110000_tender_rss_feed_owner

feat(17-02): RSS feeds get an owner — platform-wide vs personal (D-02)

2026-08-12 11:37:56 +02:00

20260909120000_user_email_optional

fix(quick-260909-ab3): kollidierende AD-Konten werden angelegt, nur ohne Adresse

2026-09-09 07:48:37 +02:00

20260909130000_rls_app_role

feat(quick-260909-dgj): Anwendungsrolle tessera_app ohne RLS-Umgehungsrecht (Task 1/4)

2026-09-09 09:59:21 +02:00

20260909140000_rls_remaining_tenant_tables

feat(quick-260909-dgj): Policies fuer die 16 fehlenden Tabellen (Task 4/4)

2026-09-09 10:05:15 +02:00

20260909160000_auth_lookup_functions

feat(quick-260909-eor): schmale SECURITY-DEFINER-Ausnahme fuer den Anmeldeweg

2026-09-09 10:56:41 +02:00

20260910120000_rls_widen_membership_grant_and_platform_read

feat(quick-260910-jab): drei zu kurz greifende RLS-Regeln schliessen (T-JTS-02, T-JTS-03, WINDOWS #19)

2026-09-10 14:29:25 +02:00

20260911120000_rls_user_dimension_personal_tables

feat(quick-260911-nke): current_user_id(), Benutzerdimension in den Regeln, forTenant() mit userId — ein Pfad

2026-09-11 17:25:45 +02:00

20260914120000_rls_system_context_read

feat(quick-260914-eym): forSystem(), is_system_context(), Systemleseregel auf fuenf Tabellen, DKV-Planer je Mandant — ein Pfad (WINDOWS #21)

2026-09-14 11:32:54 +02:00

20260914170000_smtp_config_bug_report_recipient

feat(quick-260914-m97): Fehlermeldungen per E-Mail — Empfaenger in SmtpConfig (Migration), MailService-Anhaenge, Modul bug-reports mit Drossel, PNG-Pruefung und Mandant aus der Sitzung

2026-09-14 16:45:09 +02:00

20260916120000_remove_link_widget

feat: Link-Widget restlos entfernt (Web, API, Migration, Handbuch, Changelog)

2026-09-16 13:44:09 +02:00

20260921120000_dashboard_image

feat(quick-260921-pi9): Bilderrahmen-API - Bilder je Benutzer in der Datenbank, Magic-Byte-Pruefung, 5 MiB / 30 Stueck

2026-09-21 18:47:07 +02:00

20260922120000_dashboard_image_to_disk

refactor(quick-260922-hk4): Bilderrahmen-Bilder in user-files statt in der Datenbank

2026-09-22 15:22:47 +02:00

20260923120000_dashboard_tabs

feat(quick-260923-ad9): Datenmodell, Migration und Reiter-Grundlage - Task 1

2026-09-23 07:56:38 +02:00

20260923140000_proxmox_server

feat(260923-dhh): Proxmox-Modul Aufgabe 1 - PVE per Token, Ende-zu-Ende

2026-09-23 10:17:33 +02:00

20260923160000_favorite_icon_upload

feat(260923-lrr): API — Favoriten-Symbol hochladen, Vorrang, Versionszaehler, Abrufprobe

2026-09-23 16:04:29 +02:00

migration_lock.toml

feat(02-01): Prisma schema expansion, RLS migration, and PrismaModule

2026-06-18 13:22:38 +02:00