dorfteich/apps/web/src/pages
Claude Fable 5 afef45732a
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 4m52s
CI / Build container images (pull_request) Successful in 3m55s
CI / Auth e2e pack (pull_request) Successful in 7m52s
CI / Import/export fidelity gate (pull_request) Successful in 55s
CD / Build and push images (push) Successful in 16s
CD / Deploy to Test (push) Successful in 14s
CD / Smoke tests against Test (push) Successful in 1m14s
CD / Promote to Int (push) Successful in 11s
CI / Lint, typecheck, test (push) Successful in 4m55s
CI / Build container images (push) Has been skipped
CI / Auth e2e pack (push) Successful in 7m34s
CI / Import/export fidelity gate (push) Successful in 58s
#191: feeds.enabled instance switch, feed-token log masking
Chosen path: an instance master switch following the api.enabled/
mcp.enabled pattern — while off, both feed routes AND the feed-token
management answer 404 (existence hidden). Default ON: feeds predate the
switch, existing instances and their subscribed readers keep working;
the VS-NfD reference configuration (#227) turns it off. Admin UI gets
the toggle next to the API/MCP switches (i18n de+en).

Moving the token out of the query string is documented as rejected: a
path segment lands in the same proxy and request logs, and feed readers
cannot send headers — that is why the credential is in the URL at all.
What DID leak was our own request log (pino logs req.url): the req
serializer now masks ?token= values (common/mask-token-param.ts), so no
code path logs the credential.

Refs #191

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168Ph5uBmHm8X28CSVpbpnJ
2026-07-30 11:34:43 +02:00
..
auth #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
AdminBackupSection.tsx Backup mirror to BASEL: rsync of the sets after every successful run (#84) 2026-07-12 12:20:32 +02:00
AdminSettingsPage.tsx #191: feeds.enabled instance switch, feed-token log masking 2026-07-30 11:34:43 +02:00
AdminSystemPage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
DeletePageDialog.tsx #162: Fokus-Management für Dialoge und Such-Palette 2026-07-21 13:52:59 +02:00
FontCatalogPage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
HomePage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
LegalPage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
MaintenancePage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
MovePageDialog.tsx #162: Fokus-Management für Dialoge und Such-Palette 2026-07-21 13:52:59 +02:00
NotFoundPage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
PageActions.tsx #162: Fokus-Management für Dialoge und Such-Palette 2026-07-21 13:52:59 +02:00
PageEditorPage.tsx #186: pond accent theming — scoped derivation, cascade pond > user > default 2026-07-29 09:09:36 +02:00
PageStatusBar.tsx #134 Statuszeile zwischen Navigation und Artikel 2026-07-19 01:04:11 +02:00
PluginManager.tsx UI polish: frameless plugin blocks in read mode, sticky toolbar, pinned footer, icon uninstall 2026-07-12 15:33:32 +02:00
PluginPreviewPage.tsx Add the sandbox host runtime for plugin iframes (#73) 2026-07-11 09:16:30 +02:00
PondHomePage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
PondSettingsPage.tsx #186: pond accent theming — scoped derivation, cascade pond > user > default 2026-07-29 09:09:36 +02:00
PublicPageView.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
QuotaManager.tsx #168: Formulare — Fehler-Verdrahtung und Namenslücken 2026-07-21 14:26:54 +02:00
SettingsPage.tsx #186: pond accent theming — scoped derivation, cascade pond > user > default 2026-07-29 09:09:36 +02:00
TrashPage.tsx #163: Dokumentsprache und Seitentitel der SPA 2026-07-21 13:52:59 +02:00
UserManager.tsx #177: Admin-Personenliste — Aktions-Zelle bleibt Table-Cell, Flex auf Innen-Wrapper 2026-07-27 13:36:27 +02:00