Frontend
- Bring spring-angular-ui back under version control with the Angular 22 +
Material UI from demo-monolith; stop committing the built static/ folder
- Serve the UI from nginx, which proxies /api to the backend so the JWT
cookie works on a single origin, and falls back to index.html for routes
Backend
- Add PUT /api/users/{id}/roles (admin only) that keeps at least one admin
and does not let an admin drop their own admin role
- Tighten security: read tutorials publicly, change them only when logged
in, users/roles API for admins only; hide password hashes in JSON
- Remove unused Settings and Test endpoints, DTO mappers, commented code
- Flyway V2 aligns the schema with the entities; Hibernate now runs with
ddl-auto: validate
- JWT lifetime matches the 24h cookie; fix the cookie name typo
- Keep CORS only for calling the API directly (ng serve without proxy)
Docker
- Backend Dockerfile: Gradle build + JRE runtime with layer caching,
non-root user and healthcheck; add .dockerignore
- UI Dockerfile: Node 24 build + nginx with healthcheck
- docker-compose runs its own Postgres, starts services in health order
and always rebuilds images
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
27 lines
528 B
JSON
27 lines
528 B
JSON
/* To learn more about this file see: https://angular.io/config/tsconfig. */
|
|
{
|
|
"extends": "./tsconfig.json",
|
|
"compilerOptions": {
|
|
"outDir": "./out-tsc/spec",
|
|
"types": [
|
|
"jasmine"
|
|
]
|
|
},
|
|
"files": [
|
|
"src/test.ts",
|
|
"src/polyfills.ts"
|
|
],
|
|
"include": [
|
|
"src/**/*.spec.ts",
|
|
"src/**/*.d.ts"
|
|
],
|
|
"angularCompilerOptions": {
|
|
"extendedDiagnostics": {
|
|
"checks": {
|
|
"nullishCoalescingNotNullable": "suppress",
|
|
"optionalChainNotNullable": "suppress"
|
|
}
|
|
}
|
|
}
|
|
}
|