openclaw/helpyourneighbour
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
263 commits 26 branches 0 tags 25 MiB
Find a file
BibaBot 901bcf454c
Some checks are pending
Docker Test / test (push) Waiting to run
Details
feat: Add role-based access control tests and fix middleware export 
This commit adds comprehensive unit tests for the role-based access control middleware and fixes the ES module export issue. The tests verify that users with correct roles can access protected routes, while users with incorrect roles or no authentication are properly denied access.
2026-03-17 19:07:03 +00:00
.github/workflows fix(#9): Implement CI-Workflow for Docker tests on push and PR 2026-03-06 21:51:38 +00:00
backend feat: Add role-based access control tests and fix middleware export 2026-03-17 19:07:03 +00:00
docs docs: update RBAC documentation and add integration tests 2026-03-16 19:08:37 +00:00
issues feat: create issue #5 for RBAC implementation 2026-03-16 08:06:33 +00:00
node_modules Add unit tests for role middleware 2026-03-17 07:07:36 +00:00
scripts auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-15 15:19:11 +00:00
test Add comprehensive tests for role middleware and fix package dependencies 2026-03-16 20:07:22 +00:00
.gitignore auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-06 15:39:11 +00:00
CONTRIBUTING.md fix(#20): Add Definition of Done to CONTRIBUTING.md and TESTING.md 2026-03-06 23:56:36 +00:00
demo-happy-path.sh fix(#26): Erstelle End-to-End Happy-Path Demo-Script 2026-03-07 00:15:33 +00:00
docker-compose.test.yml auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-15 15:19:11 +00:00
Dockerfile.test fix(#11): Configure Codex Runner workingDir and allowWrite for repo access 2026-03-06 22:54:59 +00:00
ISSUE-12.md feat: Add role middleware template and issue #12 2026-03-16 12:06:33 +00:00
ISSUE-123.md feat: Implement role-based access control middleware and update documentation 2026-03-16 03:06:38 +00:00
ISSUE-124.md feat: add issue #124 for RBAC implementation 2026-03-16 10:06:38 +00:00
ISSUE-TEMPLATE.md feat: add role-based access control implementation 2026-03-17 02:06:44 +00:00
issue_10.md feat: implement role-based access control (RBAC) for API endpoints 2026-03-16 16:06:37 +00:00
ISSUE_TEMPLATE.md feat: Implement role management API endpoints 2026-03-16 05:07:56 +00:00
NEXT_STEPS.md Update status and next steps documentation after Playwright configuration issue analysis 2026-03-12 01:22:24 +00:00
openapi.yaml Add full OpenAPI spec for current backend routes 2026-03-05 15:11:56 +00:00
package-lock.json Add unit tests for role middleware 2026-03-17 07:07:36 +00:00
package.json Add unit tests for role middleware 2026-03-17 07:07:36 +00:00
PLAYWRIGHT_ISSUE.md docs: document Playwright configuration issue and update next steps 2026-03-07 07:08:30 +00:00
PROJECT_SUMMARY.md auto(agent): Run expanded local discovery and continue with next actionable task 2026-03-06 15:39:11 +00:00
README.md feat: Add role-based access control tests and middleware integration 2026-03-17 04:07:27 +00:00
STATUS.md Update status and next steps documentation after Playwright configuration issue analysis 2026-03-12 01:22:24 +00:00
tailscale_integration_status.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
tailscale_kasm_integration.md auto(agent): enhance profile route tests and coverage 2026-03-06 20:36:58 +00:00
tailscale_kasm_integration_detailed.md Update Tailscale integration documentation for Kasm container 2026-03-06 22:34:32 +00:00
tailscale_sidecar_final.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
tailscale_sidecar_integration.md auto(agent): Fix offers route validation 2026-03-06 21:28:38 +00:00
TESTING.md test: add unraid docker test harness 2026-03-04 21:13:12 +00:00

README.md

helpyourneighbour

Erster funktionaler Backend-Stand für die Vision:

  • Nutzerregistrierung und Login (/auth/register, /auth/login)
  • Hilfeanfragen erstellen/listen (/requests)
  • Angebote + Gegenangebote + Deal-Annahme (/offers/...)
  • Bewertungsgrundlage mit 2-14 Tage Prompt-Fenster (/reviews/:dealId)
  • Datenmodell inkl. postalischer Adress-Verifikation (backend/sql/schema.sql)
  • Address-Change-Flow mit Briefcode (/addresses/change-request, /addresses/verify)
  • Kontaktdatenaustausch nach Deal (/contacts/request, /contacts/respond, /contacts/deal/:dealId)
  • Serverseitige AES-256-GCM-Verschlüsselung für Adresse/Telefon (DATA_ENCRYPTION_KEY)

Docker-Test (Unraid Host)

./scripts/test-in-docker.sh

Start

cd backend
cp .env.example .env
npm install
npm run db:init
npm run start

Forgejo Tasks

  • #1 Backend Grundgerüst + Auth API
  • #2 Datenmodell für Request/Offer/Negotiation/Deal
  • #3 Bewertungssystem 2-14 Tage Verzögerung
  • #4 Adressänderung nur per Briefbestätigung

API Governance

  • Dispute-Flow Doku: docs/dispute-flow.md

  • OpenAPI: openapi.yaml (Spiegel: docs/openapi.yaml)

  • Versioning/Deprecation Policy: docs/api-versioning.md

  • Rollen- und Rechtekonzept: docs/roles-and-permissions.md

Development Quickstart (auto-synced)

cd backend
npm install
npm run test:unit
npm run start

Projektstruktur

Das Projekt besteht aus folgenden Hauptkomponenten:

  • backend/ - Node.js Backend mit Express
  • docs/ - Dokumentation und ADRs
  • scripts/ - Hilfsskripte für Tests und Deployment
  • frontend/ - (geplant) React Frontend

Sicherheit

Alle sensiblen Daten werden serverseitig verschlüsselt. Die Verschlüsselung erfolgt mit AES-256-GCM.

Lizenz

Dieses Projekt ist unter der MIT-Lizenz lizenziert - siehe die LICENSE-Datei für weitere Informationen.