jappel/leistungsbilanz-ts
1
0
Fork 1
Code Issues 6 Pull requests Projects Releases Packages Wiki Activity Actions

Document authenticated deployment

Browse source
This commit is contained in:
Julian Appel 2026-09-28 22:42:11 +02:00
parent 847f4e9493
commit 3670f02ccd
9 changed files with 97 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

5
AGENTS.md
View file

@ -42,7 +42,10 @@ It must support circuits, device rows, project devices, drag-and-drop restructur
`src/db/repositories/user.repository.ts`. Every `/api/*` route requires a
signed-in user (`src/server/index.ts`); `/api/users/*` additionally
requires `admin`. Frontend gate: `AuthProvider` + `LoginGate`
(`src/app/layout.tsx`). See `docs/authentication.md` for the full picture.
(`src/app/layout.tsx`). Every unsafe API request also requires the explicit
`X-Leistungsbilanz-Request: 1` application header, including over plain HTTP.
Account settings are available to every signed-in user; user administration
remains admin-only. See `docs/authentication.md` for the full picture.
The supported runtime model is Circuit-First. The former Consumer UI, API,
tables and upgrade tooling are removed; do not reintroduce them.