7 Commits

Author	SHA1	Message	Date
Paul R Kartchner	91146e1219	ci: automate Prisma migrations in pipeline and deploy [skip-deploy] ... Moves migration handling into the pipeline and production deploy so schema changes ship atomically with the code that depends on them. Previously migrations were manual and the migrations/ directory was gitignored, which caused silent drift between environments. - Track packages/api/prisma/migrations/ in git (including the baseline 20260416000000_init and the family-tenant delta). - Add `prisma:deploy` script that runs `prisma migrate deploy` (the non-interactive, CI-safe command). `prisma:migrate` still maps to `migrate dev` for local authoring. - Pipeline test-api and e2e-tests jobs now use `prisma:deploy` and test-api adds a drift check (`prisma migrate diff --exit-code`) that fails the build if schema.prisma has changes without a corresponding migration. - deploy.sh runs migrations against prod using `docker run --rm` with the freshly pulled API image before restarting containers, so a failing migration aborts the deploy with the old containers still serving traffic. The [skip-deploy] tag avoids re-triggering deployment for this infrastructure commit; the updated deploy.sh must be pulled to the production host out-of-band before the next deployment benefits from the new migration step. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-17 08:16:51 -06:00
Paul R Kartchner	101a5392d0	fix: generate Prisma client before TypeScript build ... The build was failing because Prisma client types weren't being generated before running tsc. This caused errors like: - Module '"@prisma/client"' has no exported member 'User' - Property 'role' does not exist on type 'User' - Property 'id' does not exist on type 'User' Changed the build script from: "build": "tsc" To: "build": "prisma generate && tsc" This ensures the Prisma client is generated with all model types before TypeScript compilation. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-01-15 14:59:36 +00:00
Paul R Kartchner	2d53b9e283	feat: add comprehensive authentication system with JWT and OAuth ... Implement a complete authentication system with local email/password authentication, Google OAuth, JWT tokens, and role-based access control. Backend Features: - Database schema with User, RefreshToken, VerificationToken, RecipeShare models - Role-based access control (USER, ADMIN) - Recipe visibility controls (PRIVATE, SHARED, PUBLIC) - Email verification for local accounts - Password reset functionality - JWT access tokens (15min) and refresh tokens (7 days) - Passport.js strategies: Local, JWT, Google OAuth - bcrypt password hashing with 12 salt rounds - Password strength validation (min 8 chars, uppercase, lowercase, number) - Rate limiting on auth endpoints (5 attempts/15min) - Email service with styled HTML templates for verification and password reset API Endpoints: - POST /api/auth/register - Register with email/password - POST /api/auth/login - Login and get tokens - POST /api/auth/logout - Invalidate refresh token - POST /api/auth/refresh - Get new access token - GET /api/auth/verify-email/:token - Verify email address - POST /api/auth/resend-verification - Resend verification email - POST /api/auth/forgot-password - Request password reset - POST /api/auth/reset-password - Reset password with token - GET /api/auth/google - Initiate Google OAuth - GET /api/auth/google/callback - Google OAuth callback - GET /api/auth/me - Get current user info Security Middleware: - requireAuth - Protect routes requiring authentication - requireAdmin - Admin-only route protection - optionalAuth - Routes that work with or without auth - requireOwnership - Check resource ownership Admin Tools: - npm run create-admin - Interactive script to create admin users - verify-user-manual.ts - Helper script for testing Test Coverage: - 49 unit and integration tests (all passing) - Password utility tests (12 tests) - JWT utility tests (17 tests) - Auth middleware tests (12 tests) - Auth routes integration tests (8 tests) Dependencies Added: - passport, passport-local, passport-jwt, passport-google-oauth20 - bcrypt, jsonwebtoken - nodemailer - express-rate-limit, express-validator, cookie-parser Environment Variables Required: - JWT_SECRET, JWT_REFRESH_SECRET - JWT_EXPIRES_IN, JWT_REFRESH_EXPIRES_IN - GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET (optional) - SMTP configuration for email - APP_URL, API_URL 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-11-25 04:37:05 +00:00
Paul R Kartchner	33eadde671	feat: add recipe editing, image upload management, and UI improvements ... Added comprehensive recipe editing functionality with improved image handling and better UX for large file uploads. **Features:** - Recipe editing: Full CRUD support for recipes with edit page - Image management: Upload, replace, and delete recipe images - Upload feedback: Processing and uploading states for better UX - File size increase: Raised limit from 10MB to 20MB for images - Nginx configuration: Added client_max_body_size for large uploads **Changes:** - Created EditRecipe.tsx page for editing existing recipes - Created NewRecipe.tsx page wrapper for recipe creation - Created RecipeForm.tsx comprehensive form component with: - Simple and multi-section recipe modes - Image upload with confirmation dialogs - Processing state feedback during file handling - Smaller, button-style upload controls - Updated recipes.routes.ts: - Increased multer fileSize limit to 20MB - Added file validation for image types - Image upload now updates Recipe.imageUrl field - Added DELETE /recipes/:id/image endpoint - Automatic cleanup of old images when uploading new ones - Updated nginx.conf: Added client_max_body_size 20M for API proxy - Updated App.css: Improved upload button styling (smaller, more compact) - Updated RecipeForm.tsx: Better file processing feedback with setTimeout - Updated help text to reflect 20MB limit and WEBP support **Technical Details:** - Fixed static file serving path in index.ts - Added detailed logging for upload debugging - Improved TypeScript type safety in upload handlers - Better error handling and user feedback 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-30 05:31:12 +00:00
Paul R Kartchner	0945d8f3e1	feat: upgrade recipe scraper to Python recipe-scrapers library (v2025.10.1) ... ## Changes ### Recipe Scraper Enhancement - Replaced custom Cheerio-based scraper with Python recipe-scrapers library - Now supports 541+ recipe websites (same as Mealie) - Added Python 3 and recipe-scrapers to Docker container - Created Python wrapper script (packages/api/scripts/scrape_recipe.py) - Updated scraper service to call Python script via subprocess ### Bug Fixes - Fixed servings field parsing (string to integer conversion) - Added safe extraction with graceful error handling - Removed obsolete test file that was breaking builds - Fixed Prisma binary targets for Alpine Linux ### Infrastructure - Added Traefik configuration for HTTPS with Let's Encrypt - Updated CORS settings for production domain - Configured for basil.pkartchner.com ### Version Management - Implemented CalVer versioning (Year.Month.Increment) - Added VERSION file (2025.10.1) - Created version.sh script for managing releases - Tagged and pushed Docker images to Harbor registry ### Database - Updated Prisma schema with correct binary targets - Applied initial migration for all tables ### Build Improvements - Excluded test files from TypeScript compilation - Removed non-existent dependencies - Optimized Docker build process ## Testing - Successfully tested with Food Network, Bon Appetit, Food.com - Verified full import and save workflow - Confirmed ingredients and instructions display correctly 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-28 17:51:39 +00:00
Paul R Kartchner	554b53bec7	feat: add comprehensive testing infrastructure ... - Add Vitest for unit testing across all packages - Add Playwright for E2E testing - Add sample tests for API, Web, and Shared packages - Configure Gitea Actions CI/CD workflows (ci, e2e, security, docker) - Add testing documentation (TESTING.md) - Add Gitea Actions setup guide - Update .gitignore for test artifacts - Add test environment configuration	2025-10-28 02:03:52 -06:00
Paul R Kartchner	4e71ef9c66	first commit	2025-10-21 22:04:03 -06:00