Nick SzaunigandClaude Opus 5.5 2de93bc087 fix(auth): atomic refresh rotation and a 7-day absolute session limit ...

- Rotation claims the old token with a conditional update; of two
  concurrent refreshes only one gets a successor, so a stolen token cannot
  fork into two live sessions.
- A token rotated out less than 10 s ago (parallel tab) is refused without
  revoking every session; later reuse still revokes them all.
- Sessions end at most SESSION_MAX_AGE (default 7 days) after login: the
  login time is inherited by every rotated token and caps its expiry.
- The refresh cookie is cleared with the same attributes it was set with.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-10-01 02:30:32 +02:00

..

20260821025530_init

feat: Grundgeruest fertigstellen (Backend/Frontend/K8s)

2026-08-21 05:17:26 +02:00

20260822090024_bottling_products

feat(backend): Abfuellungen und Produkte (Modul 23)

2026-08-22 11:08:09 +02:00

20260822202209_equipment

feat(backend): Inventar (Modul 24)

2026-08-22 22:26:16 +02:00

20260822204038_notifications

feat(backend): Benachrichtigungssystem (Modul 26)

2026-08-22 22:43:38 +02:00

20260822205152_queen_evaluations

feat(backend): Koeniginnenbewertung (Modul 31)

2026-08-22 22:55:36 +02:00

20260823044358_webhooks

feat(backend): Webhooks mit HMAC-signierter Auslieferung (Modul 28)

2026-08-23 06:56:56 +02:00

20260823091941_documents

feat(backend): Dokumente und Bilder mit lokalem Datei-Upload (Modul 29)

2026-08-23 11:29:22 +02:00

20260824144745_add_honey_batch_relocation

feat(backend): Lagerbehälter-Umlagerung für Honigchargen (Modul 32)

2026-08-24 16:55:15 +02:00

20260824151154_add_automation_rules

feat(backend): Automatisierungen mit drei fest hinterlegten Triggern (Modul 30)

2026-08-24 17:25:42 +02:00

20260825025552_add_queen_motherline

feat: Königinnen-Abstammungsbaum (Mutterlinie)

2026-08-25 05:13:45 +02:00

20260825031814_add_task_templates

feat: Wiederkehrende Aufgaben-Vorlagen (recurring task templates)

2026-08-25 05:36:55 +02:00

20260825065816_add_swarm_control_checks

feat: Schwarmkontrolle-Protokoll

2026-08-25 09:12:50 +02:00

20260825083604_add_auth_audit_actions

fix: harden auth against brute force, add auth audit logging, fix cookie/TLS gaps

2026-08-25 10:49:25 +02:00

20260826022125_add_rbac

feat: RBAC Rollen & Rechte (Phase 1 - Datenmodell, Roles-Verwaltung, Guard-Infrastruktur)

2026-08-26 06:52:24 +02:00

20260826071724_drop_legacy_role

feat: RBAC Phase 3 - LegacyRole-Enum, RolesGuard und @Roles vollstaendig entfernt

2026-08-26 09:01:13 +02:00

20260826213033_add_mfa_and_avatar

feat: MFA (TOTP) und Self-Service-Profilseite

2026-08-27 00:25:34 +02:00

20260826221315_add_password_changed_at

feat: MFA (TOTP) und Self-Service-Profilseite

2026-08-27 00:25:34 +02:00

20260827070028_add_colony_condition

fix: fehlende Dateien fuer Volk-Ueberarbeitung nachreichen

2026-08-27 10:51:07 +02:00

20260831152007_add_more_automation_triggers

feat: Profilseite, Etikettendruck mit QR-Code, mehr Automatisierungen und Entra-ID-SSO

2026-08-31 18:56:08 +02:00

20260831153327_add_label_templates

feat: Profilseite, Etikettendruck mit QR-Code, mehr Automatisierungen und Entra-ID-SSO

2026-08-31 18:56:08 +02:00

20260901114849_label_template_elements

fix: fehlende Dateien fuer Etiketten-Elemente-Umbau nachreichen

2026-09-01 16:59:48 +02:00

20260901173228_label_template_sheet_layout

feat: Etiketten-Seitenlayout auf dem A4-Bogen frei waehlbar

2026-09-01 19:43:01 +02:00

20260902160000_add_site_settings

feat: Abfüllungs-Archiv und Social-Media-Links auf der Herkunftsseite

2026-09-02 19:57:29 +02:00

20260903120000_add_website_url_and_number_automation

feat: add website social link, fix herkunft origin display, GUI backup schedule, and format-based batch numbering

2026-09-03 13:37:09 +02:00

20260903120100_add_backup_settings

feat: add website social link, fix herkunft origin display, GUI backup schedule, and format-based batch numbering

2026-09-03 13:37:09 +02:00

20260904090000_add_calendar_sync

feat: sync calendar entries to a Microsoft 365 group calendar

2026-09-04 09:23:35 +02:00

20260904150000_add_honey_batch_container_allocations

feat: allow a honey batch to be split across multiple storage containers

2026-09-04 19:44:33 +02:00

20260906120000_add_treatment_withdrawal_period

feat: warn against harvesting honey during a treatment's Wartezeit

2026-09-06 02:50:34 +02:00

20260927031004_idempotency_and_automation_task_source

fix: keep quantities, colony/queen states and tasks consistent under retries

2026-09-27 05:27:45 +02:00

20260927231113_add_api_keys

feat: revocable read-only API keys for machine access

2026-09-28 01:24:17 +02:00

20260928040804_label_template_crop_marks

feat(labels): cut marks in the sheet margin for trimming with a paper cutter

2026-09-28 06:11:03 +02:00

20260928042023_follow_up_triggers

feat(automation): suggest follow-up checks after treatments and feedings

2026-09-28 06:23:13 +02:00

20260928043245_bestandsbuch_fields

feat(export): Bestandsbuch für Tierarzneimittel nach Art. 108 VO (EU) 2019/6

2026-09-28 11:10:07 +02:00

20260928091348_winter_checks

feat: Ein-/Auswinterung und Winterverluste je Volk

2026-09-28 17:32:03 +02:00

20261001090000_sso_subject_and_email_case

fix(sso): bind Microsoft sign-in to the IdP identity, not the email claim

2026-10-01 01:20:49 +02:00

20261001100000_auth_lockout_totp_replay

fix(auth): lock accounts after failed attempts, one-time TOTP codes, stronger MFA changes

2026-10-01 02:27:47 +02:00

20261001110000_refresh_session_start

fix(auth): atomic refresh rotation and a 7-day absolute session limit

2026-10-01 02:30:32 +02:00

migration_lock.toml

feat: Grundgeruest fertigstellen (Backend/Frontend/K8s)

2026-08-21 05:17:26 +02:00