6 Commits

Author	SHA1	Message	Date
ld	118b7e4d2a	feat(svc): reject disabled users in Login, LoginWithPasskey, and Refresh	2026-07-04 17:13:02 +08:00
ld	1dfccf513a	Add structured logging and centralized error handling ... - Initialize slog in the serve command with terminal/file support - Introduce `AppError` with HTTP status for unified service-layer errors - Replace ad-hoc `api.Error` calls with `api.RespondError` - Wrap internal errors with `model.NewInternalError` and add reference IDs - Add `RequestID` middleware and switch router from `gin.Default` to `gin.New`	2026-07-04 16:24:22 +08:00
ld	a78d43b166	Remove client MIME type parameter from Upload ... - Fix: Always detect MIME type server-side from file content instead of trusting or forwarding the client-supplied value.	2026-06-24 20:27:22 +08:00
ld	e2af482cc9	Add file management API with local storage backend ... - Implement FileHandler with CRUD operations for files/directories - Add FileService with business logic and SHA-256 hashing - Create LocalStorage backend for filesystem persistence - Add database repository with pagination and name uniqueness constraints - Configure max upload size in storage settings - Include comprehensive tests for all layers	2026-06-24 14:08:57 +08:00
ld	b4ab864f80	Add token type to JWT claims for access/refresh distinction ... - Add TokenType enum and include in Claims struct - GenerateRefreshToken now creates tokens with TokenRefresh type - AuthRequired middleware rejects refresh tokens - AuthService.Refresh validates token type - Tests verify type validation	2026-04-29 16:55:18 +08:00
ld	3eeb9f6d26	Implement JWT authentication and app passkey support ... - Add JWT token generation and validation - Implement bcrypt password hashing - Create auth service with register/login/refresh/logout - Add app passkey generation and management - Implement protected routes and auth middleware - Add comprehensive tests for new functionality	2026-04-29 11:50:09 +08:00