4 commits

Author	SHA1	Message	Date
Madhura68	ead91cef5f	test(security): extend security.test.ts to cover all 7 API endpoints ... Adds 401, 403 demo-block, and cross-user isolation tests for: GET /api/products/:id/next-story, GET /api/sprints/:id/tasks, PATCH /api/stories/:id/tasks/reorder, POST /api/stories/:id/log, POST /api/todos. Expands prisma mock to cover all required models. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-25 18:26:54 +02:00
Madhura68	46e795002f	test(scaffold): add skeleton test files for all 7 API endpoints ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-25 18:24:25 +02:00
Madhura68	e0efb65efb	Fix scoped access checks	2026-04-25 14:36:55 +02:00
janpeter visser	d11b114fc1	feat: ST-601-ST-612 M6 polish, beveiliging en launch-ready ... - ST-601/602: loading skeletons en error boundary - ST-603: Sonner toasts op alle CRUD-operaties - ST-604: DemoTooltip op uitgeschakelde knoppen - ST-605: KeyboardSensor dnd-kit, Escape sluit modals - ST-606: min-width banner < 1024px - ST-607: WCAG AA aria-labels en skip link - ST-608: rate limiting login (10/min) en registratie (5/uur) - ST-609: security integratietests cross-user toegang (7 tests) - ST-610: GitHub Actions CI/CD workflow - ST-611: README met quickstart, deployment en API-docs - ST-612: Lars-flow acceptatiechecklist - fix: settings toont gebruikersnaam i.p.v. interne id - fix: seed idempotent, testdata altijd gekoppeld aan demo-gebruiker Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-24 12:36:23 +02:00