|
|
91d1616dd7
|
feat: PKCE auth + CI/CD deploy
CI/CD — Build & Deploy / Build & Deploy (push) Failing after 25s
- Frontend: PKCE flow (oauth.js, api.js centralized, cookie-based AuthContext)
- Backend: token introspection, cookies httpOnly, refresh endpoint
- Replaced localStorage JWT with httpOnly session cookies
- useSaveSync migrated to cookie auth
- cookie-parser added
- Gitea CI workflow (vps-runner pattern)
|
2026-03-24 13:01:15 +01:00 |
|
|
|
dece214102
|
chore: uninstall nodemailer — plus utilisé après suppression password reset
|
2026-03-20 15:16:17 +01:00 |
|
|
|
3d69899dbf
|
fix: backend dead code + bug destroy + nettoyage legacy
- Suppression forgottenPassword/resetPassword (dead code, routes jamais câblées)
- Suppression nodemailer (plus utilisé)
- Fix destroy() : getById() → read() (bug — méthode inexistante)
- Ajout getByNickname() dans UserManager (appelé mais manquant)
- README rebrandé Clickerz/Tetardtek
- Commentaire legacy WildCoinContext supprimé
- SPRINT1.md : ref Xmass nettoyée
|
2026-03-20 15:11:26 +01:00 |
|
|
|
a52746ed0c
|
feat(sprint1-step3b): backend save system + anti-cheat + données rattrapées
- game_saves table + migration 002 (JSON state, anti-cheat metadata)
- saveControllers.js : load/save avec validation delta ressources (750k/s × 1.1)
- GameSaveManager : upsert MySQL ON DUPLICATE KEY UPDATE
- useSaveSync hook : auto-save 30s + keepalive beforeunload + guest fallback
- save-validation.test.ts : 8 tests anti-cheat
- economy.ts : arbre d'évolution 5 nœuds + prestige ADN (rattrapage step 2)
- economy.test.ts : +40 tests (évolution tree, multipliers, start bonus)
- GDD + SPRINT1.md : docs sprint complètes
- Rethème data : shop.json, Achievements.json, Cookie, Legal (rattrapage step 1)
|
2026-03-20 13:40:16 +01:00 |
|
|
|
c69da320cc
|
feat(sprint1-step2): core economy TS + useEconomy hook (lazy calc) + 13 tests vitest
|
2026-03-17 06:36:51 +01:00 |
|
|
|
c414cf2d07
|
db(T0): schema + migration 001 — super_oauth_id, firstname, lastname
tech-lead: overflow granted — gate migration avant Sprint B+C SuperOAuth
|
2026-03-15 18:11:42 +01:00 |
|
|
|
be9c28b59d
|
fix(security): IDOR verifyToken+verifySelf, resetTokenSecret, firstname/lastname add, JWT expiresIn 7d
|
2026-03-15 17:25:31 +01:00 |
|
|
|
4e93753250
|
feat: initial import — ClickerZ formation project (Express + React/Vite)
|
2026-03-15 14:29:33 +01:00 |
|
