No description
Find a file
BibaBot Jarvis 097d1af837
Some checks are pending
Docker Test / test (push) Waiting to run
feat: create issue #5 for RBAC implementation
Created issue #5 to track the implementation of role-based access control for API endpoints as per the documented roles and permissions.
2026-03-16 08:06:33 +00:00
.github/workflows fix(#9): Implement CI-Workflow for Docker tests on push and PR 2026-03-06 21:51:38 +00:00
backend feat: Add role middleware and update permissions documentation 2026-03-16 07:06:43 +00:00
docs feat: Implement role-based access control middleware and update documentation 2026-03-16 03:06:38 +00:00
issues feat: create issue #5 for RBAC implementation 2026-03-16 08:06:33 +00:00
scripts auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-15 15:19:11 +00:00
test feat: Implement role management API endpoints 2026-03-16 05:07:56 +00:00
.gitignore auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-06 15:39:11 +00:00
CONTRIBUTING.md fix(#20): Add Definition of Done to CONTRIBUTING.md and TESTING.md 2026-03-06 23:56:36 +00:00
demo-happy-path.sh fix(#26): Erstelle End-to-End Happy-Path Demo-Script 2026-03-07 00:15:33 +00:00
docker-compose.test.yml auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-15 15:19:11 +00:00
Dockerfile.test fix(#11): Configure Codex Runner workingDir and allowWrite for repo access 2026-03-06 22:54:59 +00:00
ISSUE-123.md feat: Implement role-based access control middleware and update documentation 2026-03-16 03:06:38 +00:00
ISSUE_TEMPLATE.md feat: Implement role management API endpoints 2026-03-16 05:07:56 +00:00
NEXT_STEPS.md Update status and next steps documentation after Playwright configuration issue analysis 2026-03-12 01:22:24 +00:00
openapi.yaml Add full OpenAPI spec for current backend routes 2026-03-05 15:11:56 +00:00
PLAYWRIGHT_ISSUE.md docs: document Playwright configuration issue and update next steps 2026-03-07 07:08:30 +00:00
PROJECT_SUMMARY.md auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-06 15:39:11 +00:00
README.md docs: update README with project structure and license information 2026-03-10 02:06:21 +00:00
STATUS.md Update status and next steps documentation after Playwright configuration issue analysis 2026-03-12 01:22:24 +00:00
tailscale_integration_status.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
tailscale_kasm_integration.md auto(agent): enhance profile route tests and coverage 2026-03-06 20:36:58 +00:00
tailscale_kasm_integration_detailed.md Update Tailscale integration documentation for Kasm container 2026-03-06 22:34:32 +00:00
tailscale_sidecar_final.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
tailscale_sidecar_integration.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
TESTING.md test: add unraid docker test harness 2026-03-04 21:13:12 +00:00

helpyourneighbour

Erster funktionaler Backend-Stand für die Vision:

  • Nutzerregistrierung und Login (/auth/register, /auth/login)
  • Hilfeanfragen erstellen/listen (/requests)
  • Angebote + Gegenangebote + Deal-Annahme (/offers/...)
  • Bewertungsgrundlage mit 2-14 Tage Prompt-Fenster (/reviews/:dealId)
  • Datenmodell inkl. postalischer Adress-Verifikation (backend/sql/schema.sql)
  • Address-Change-Flow mit Briefcode (/addresses/change-request, /addresses/verify)
  • Kontaktdatenaustausch nach Deal (/contacts/request, /contacts/respond, /contacts/deal/:dealId)
  • Serverseitige AES-256-GCM-Verschlüsselung für Adresse/Telefon (DATA_ENCRYPTION_KEY)

Docker-Test (Unraid Host)

./scripts/test-in-docker.sh

Start

cd backend
cp .env.example .env
npm install
npm run db:init
npm run start

Forgejo Tasks

  • #1 Backend Grundgerüst + Auth API
  • #2 Datenmodell für Request/Offer/Negotiation/Deal
  • #3 Bewertungssystem 2-14 Tage Verzögerung
  • #4 Adressänderung nur per Briefbestätigung

API Governance

  • Dispute-Flow Doku: docs/dispute-flow.md

  • OpenAPI: openapi.yaml (Spiegel: docs/openapi.yaml)

  • Versioning/Deprecation Policy: docs/api-versioning.md

  • Rollen- und Rechtekonzept: docs/roles-and-permissions.md

Development Quickstart (auto-synced)

cd backend
npm install
npm test
npm run start

Projektstruktur

Das Projekt besteht aus folgenden Hauptkomponenten:

  • backend/ - Node.js Backend mit Express
  • docs/ - Dokumentation und ADRs
  • scripts/ - Hilfsskripte für Tests und Deployment
  • frontend/ - (geplant) React Frontend

Sicherheit

Alle sensiblen Daten werden serverseitig verschlüsselt. Die Verschlüsselung erfolgt mit AES-256-GCM.

Lizenz

Dieses Projekt ist unter der MIT-Lizenz lizenziert - siehe die LICENSE-Datei für weitere Informationen.