Security: - Change permitAll() to denyAll() for unlisted routes - Add @PreAuthorize to membership endpoints - Add ownership check in requestMembership - Use AccessDeniedException instead of SecurityException Error Handling: - Add proper exception mapping for IllegalArgumentException (400) - Add proper exception mapping for IllegalStateException (409) - Add proper exception mapping for AccessDeniedException (403) - Remove internal error messages from generic exception handler Tests: - Update MembershipServiceTest for new method signature - Update MeteringPointServiceTest for AccessDeniedException - All 37 tests passing |
||
|---|---|---|
| .idea | ||
| .mvn/wrapper | ||
| eeg_backend | ||
| eeg_frontend | ||
| .gitattributes | ||
| .gitignore | ||
| AGENTS.md | ||
| ai-context.ps1 | ||
| mvnw | ||
| mvnw.cmd | ||
| pom.xml | ||