Go to file
Bernhard Müller b0145f3b30 fix(security): fix critical security and error handling issues
Security:
- Change permitAll() to denyAll() for unlisted routes
- Add @PreAuthorize to membership endpoints
- Add ownership check in requestMembership
- Use AccessDeniedException instead of SecurityException

Error Handling:
- Add proper exception mapping for IllegalArgumentException (400)
- Add proper exception mapping for IllegalStateException (409)
- Add proper exception mapping for AccessDeniedException (403)
- Remove internal error messages from generic exception handler

Tests:
- Update MembershipServiceTest for new method signature
- Update MeteringPointServiceTest for AccessDeniedException
- All 37 tests passing
2026-07-21 16:27:35 +02:00
.idea generalized dashboard for member and admin 2026-07-05 10:49:46 +02:00
.mvn/wrapper first commit 2026-05-22 08:59:13 +02:00
eeg_backend fix(security): fix critical security and error handling issues 2026-07-21 16:27:35 +02:00
eeg_frontend feat(community): add metering point deletion with business rules 2026-07-21 15:06:48 +02:00
.gitattributes first commit 2026-05-22 08:59:13 +02:00
.gitignore complete MaKo consent flow and admin initialization 2026-07-21 10:01:19 +02:00
AGENTS.md docs: add conventional commits guideline to AGENTS.md 2026-07-21 11:15:40 +02:00
ai-context.ps1 implemented delete of energy community 2026-07-01 12:57:01 +02:00
mvnw first commit 2026-05-22 08:59:13 +02:00
mvnw.cmd first commit 2026-05-22 08:59:13 +02:00
pom.xml first commit 2026-05-22 08:59:13 +02:00