7 Commits

Include renames

Author	SHA1	Message	Date
NuklearRabbit	81e3fd63bd	M54: harden operations and demo resilience	2026-08-24 03:31:03 +02:00
NuklearRabbit	ae39a8947f	M39: harden application and acceptance gates	2026-08-17 03:17:44 +02:00
NuklearRabbit	c3f1cfc699	M21: add optional organisation identity	2026-08-10 15:35:25 +02:00
NuklearRabbit	2ee8b2d82b	M15: synchronize contracts and acceptance	2026-08-10 05:39:19 +02:00
NuklearRabbit	0bfcf71ff7	M8: add operational authentication mode	2026-08-10 02:06:50 +02:00
NuklearRabbit	ffc88e33b4	feat(auth): add server-backed demo sessions ... The browser treated sessionStorage as the source of truth for the logged-in user and never verified or invalidated the server-side session cookie: no GET /api/v1/demo/session or POST /api/v1/demo/logout endpoint existed, and a central 401 handler was defined but never wired up. Add both endpoints; the session-check response is marked Cache-Control: no-store to avoid the browser serving a stale "authenticated" response right after logout. AuthProvider now verifies against the server on every mount (sessionStorage only caches presentation state to avoid a login-screen flash), subscribes to a central 401 listener on the API client, and RequireAuth shows a loading state during verification instead of flashing protected content or the wrong role.	2026-08-02 04:51:54 +02:00
NuklearRabbit	03c5b60235	M1: implement operational core ... Demo auth, seed import/reset, dashboard, vehicle/booking list+detail, audit trail. Backend: 19 tests passing, ruff clean. Frontend: React Router shell, typed API client, responsive pages. Verified end-to-end via curl and browser.	2026-08-01 21:20:53 +02:00