buhapp-backend

ga/buhapp-backend

Fork 0

Commit Graph

Author	SHA1	Message	Date
ga	5b70bc3137	Auth: HttpOnly cookie buhapp_at (без CORS preflight) - Login/Register ставят cookie (HttpOnly, Secure, SameSite=Lax) - Middleware читает cookie первым - CORS: AllowCredentials=true - Для прямых API-вызовов остался Authorization Bearer - Legacy ?_t= query fallback	2026-08-20 21:50:28 +00:00
ga	1eb7af6bac	Sprint 5: reviews and ratings - POST /api/v1/reviews (one per chat_id, UNIQUE) - GET /api/v1/users/:id/reviews (public list) - GET /api/v1/users/:id/stats (rating_avg, count) - migration 0004: reviews (rating 1-5, anonymous flag), user_stats aggregate - only chat participants can review; reviewed_id is other party	2026-08-20 16:20:15 +00:00
ga	8d754f9834	Sprint 1: scaffold backend (Go + Fiber + PG + Redis + MinIO) - POST /api/v1/auth/register with mandatory consents - POST /api/v1/auth/login - GET /api/v1/me (protected) - GET /api/v1/legal/{terms,privacy,disclaimer} - Migrations for users, consent_log, audit_log - bcrypt + JWT (access + refresh) - Docker Compose stack	2026-08-20 15:41:05 +00:00

Author

SHA1

Message

Date

5b70bc3137

Auth: HttpOnly cookie buhapp_at (без CORS preflight)

- Login/Register ставят cookie (HttpOnly, Secure, SameSite=Lax)
- Middleware читает cookie первым
- CORS: AllowCredentials=true
- Для прямых API-вызовов остался Authorization Bearer
- Legacy ?_t= query fallback

2026-08-20 21:50:28 +00:00

1eb7af6bac

Sprint 5: reviews and ratings

- POST /api/v1/reviews (one per chat_id, UNIQUE)
- GET  /api/v1/users/:id/reviews (public list)
- GET  /api/v1/users/:id/stats (rating_avg, count)
- migration 0004: reviews (rating 1-5, anonymous flag), user_stats aggregate
- only chat participants can review; reviewed_id is other party

2026-08-20 16:20:15 +00:00

8d754f9834

Sprint 1: scaffold backend (Go + Fiber + PG + Redis + MinIO)

- POST /api/v1/auth/register with mandatory consents
- POST /api/v1/auth/login
- GET  /api/v1/me (protected)
- GET  /api/v1/legal/{terms,privacy,disclaimer}
- Migrations for users, consent_log, audit_log
- bcrypt + JWT (access + refresh)
- Docker Compose stack

2026-08-20 15:41:05 +00:00

3 Commits