Liosha84andClaude Opus 5.5
514e1fd0c7
Frontend
- Bring spring-angular-ui back under version control with the Angular 22 +
Material UI from demo-monolith; stop committing the built static/ folder
- Serve the UI from nginx, which proxies /api to the backend so the JWT
cookie works on a single origin, and falls back to index.html for routes
Backend
- Add PUT /api/users/{id}/roles (admin only) that keeps at least one admin
and does not let an admin drop their own admin role
- Tighten security: read tutorials publicly, change them only when logged
in, users/roles API for admins only; hide password hashes in JSON
- Remove unused Settings and Test endpoints, DTO mappers, commented code
- Flyway V2 aligns the schema with the entities; Hibernate now runs with
ddl-auto: validate
- JWT lifetime matches the 24h cookie; fix the cookie name typo
- Keep CORS only for calling the API directly (ng serve without proxy)
Docker
- Backend Dockerfile: Gradle build + JRE runtime with layer caching,
non-root user and healthcheck; add .dockerignore
- UI Dockerfile: Node 24 build + nginx with healthcheck
- docker-compose runs its own Postgres, starts services in health order
and always rebuilds images
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
27 lines
1.4 KiB
TypeScript
27 lines
1.4 KiB
TypeScript
import { NgModule } from '@angular/core';
|
|
import { RouterModule, Routes } from '@angular/router';
|
|
import { TutorialsListComponent } from './components/tutorials-list/tutorials-list.component';
|
|
import { TutorialDetailsComponent } from './components/tutorial-details/tutorial-details.component';
|
|
import { AddTutorialComponent } from './components/add-tutorial/add-tutorial.component';
|
|
import { BoardAdminComponent } from './components/board-admin/board-admin.component';
|
|
import { ProfileComponent } from './components/profile/profile.component';
|
|
import { RegisterComponent } from './components/register/register.component';
|
|
import { HomeComponent } from './components/home/home.component';
|
|
import { adminGuard, authGuard } from './helpers/auth.guard';
|
|
|
|
const routes: Routes = [
|
|
{ path: 'home', component: HomeComponent },
|
|
{ path: 'register', component: RegisterComponent },
|
|
{ path: 'profile', component: ProfileComponent, canActivate: [authGuard] },
|
|
{ path: 'admin', component: BoardAdminComponent, canActivate: [adminGuard] },
|
|
{ path: '', redirectTo: 'home', pathMatch: 'full' },
|
|
{ path: 'tutorials', component: TutorialsListComponent },
|
|
{ path: 'tutorials/:id', component: TutorialDetailsComponent, canActivate: [authGuard] },
|
|
{ path: 'add', component: AddTutorialComponent, canActivate: [authGuard] }
|
|
];
|
|
|
|
@NgModule({
|
|
imports: [RouterModule.forRoot(routes, {useHash: true})],
|
|
exports: [RouterModule]
|
|
})
|
|
export class AppRoutingModule { } |