875c2e8f48
fix: security hardening — block self-registration, SSE auth, audit logging fixes
...
Build and Push Docker Image / build (push) Has been cancelled
Security fixes:
- Block self-registration via magic link (PrismaAdapter createUser throws)
- Magic links only sent to existing ACTIVE users (prevents enumeration)
- signIn callback rejects non-existent users (defense-in-depth)
- Change schema default role from JURY_MEMBER to APPLICANT
- Add authentication to live-voting SSE stream endpoint
- Fix false FILE_OPENED/FILE_DOWNLOADED audit events on page load
(remove purpose from eagerly pre-fetched URL queries)
Bug fixes:
- Fix impersonation skeleton screen on applicant dashboard
- Fix onboarding redirect loop in auth layout
Observer dashboard redesign (Steps 1-6):
- Clickable round pipeline with selected round highlighting
- Round-type-specific dashboard panels (intake, filtering, evaluation,
submission, mentoring, live final, deliberation)
- Enhanced activity feed with server-side humanization
- Previous round comparison section
- New backend queries for round-specific analytics
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-04 20:18:50 +01:00
Matt
b5425e705e
Apply full refactor updates plus pipeline/email UX confirmations
Build and Push Docker Image / build (push) Successful in 10m33s
2026-02-14 15:26:42 +01:00
002a9dbfc3
Platform review round 2: audit logging migration, nav unification, DB indexes, and UI polish
...
- Migrate ~41 inline audit log calls to shared logAudit() utility across all routers
- Add transaction-aware prisma parameter to logAudit() for atomic operations
- Unify jury/mentor/observer navigation into shared RoleNav component
- Add composite DB indexes (Evaluation, GracePeriod, AuditLog) for query performance
- Fix profile page: consolidate dual save buttons, proper useEffect initialization
- Enhance auth error page with MOPC branding and navigation
- Improve observer dashboard with prominent read-only badge
- Fix DI-3: fetch projects before bulk status update for accurate notifications
- Remove unused aiBoost field from smart-assignment scoring
- Add shared image-upload utility and structured logger module
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-05 21:09:06 +01:00
a606292aaa
Initial commit: MOPC platform with Docker deployment setup
...
Full Next.js 15 platform with tRPC, Prisma, PostgreSQL, NextAuth.
Includes production Dockerfile (multi-stage, port 7600), docker-compose
with registry-based image pull, Gitea Actions CI workflow, nginx config
for portal.monaco-opc.com, deployment scripts, and DEPLOYMENT.md guide.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-30 13:41:32 +01:00
