2 Commits

Author	SHA1	Message	Date
Claude	8d72dfa09d	fix(webapp): use Web Crypto API in middleware and drop node: prefix in auth route ... Middleware runs in Edge Runtime (no Node.js built-ins), so use globalThis.crypto.subtle for HMAC verification. Route handler uses `import { createHmac } from 'crypto'` without the node: prefix which webpack cannot resolve during Next.js build. https://claude.ai/code/session_01CdisLhbC2kVt2hxfJ7TNPf	2026-04-03 13:59:09 +00:00
Claude	01f34915f6	feat(dashboard): complete CV branching dashboard with auth and full editing workflow ... - Visual branch heritage tree with colored dots and connecting lines, depth-aware expand/collapse - Dashboard 3-tab layout: Content (inline block editing + patch staging), Patches (diff view), Submissions (AI suggestions) - Inline block editing: click to edit any CV block, stage edits, save as named branch with pre-filled patches - Submissions tab: create applications, request AI tailoring suggestions, accept/reject per suggestion - Simple hardcoded login (username/password via env vars LOGIN_USER/LOGIN_PASS, defaults admin/admin) - Authentik OIDC integration: authorize redirect + callback exchange, configurable via NEXT_PUBLIC_AUTHENTIK_* - Middleware protecting /dashboard with session cookie verification (HMAC-SHA256) - Auth API routes: /api/auth/login, /api/auth/logout, /api/auth/callback, /api/auth/token - Backend: GET/PATCH submission routes for listing submissions and accepting/rejecting AI suggestions - API client: OIDC bearer token forwarding from client-readable cookie https://claude.ai/code/session_01CdisLhbC2kVt2hxfJ7TNPf	2026-04-03 13:45:51 +00:00