Claude Opus 5 ee6a11f9b0 #304: declare the font-list route's access rule explicitly ... The route-permission fence (#52) failed in CI, not locally: I had run the fonts and import-export suites, not the full api suite, and that fence needs a database. `@AuthenticatedOnly()` is the rule the route always meant — a session, no further permission. Re-verified with the FULL api suite against a fresh database: 103 files / 575 tests passed.		2026-08-01 18:46:47 +02:00
..
assets	#209: pandoc reference documents carry the VS-NfD marking for DOCX/ODT	2026-07-31 07:09:47 +02:00
prisma	#303: operator-uploaded fonts — storage, API, PDF embedding, backup	2026-08-01 14:49:13 +02:00
scripts	#209: pandoc reference documents carry the VS-NfD marking for DOCX/ODT	2026-07-31 07:09:47 +02:00
src	#304: declare the font-list route's access rule explicitly	2026-08-01 18:46:47 +02:00
.swcrc	Add NestJS API skeleton with config, logging, and /healthz	2026-07-04 19:10:07 +02:00
Dockerfile	#303 follow-up: the fonts volume must mount node-owned	2026-08-01 15:12:06 +02:00
nest-cli.json	Add NestJS API skeleton with config, logging, and /healthz	2026-07-04 19:10:07 +02:00
package.json	#214: OIDC Authorization Code with PKCE, Keycloak as reference IdP	2026-07-31 12:44:52 +02:00
tsconfig.build.json	Add NestJS API skeleton with config, logging, and /healthz	2026-07-04 19:10:07 +02:00
tsconfig.json	Add NestJS API skeleton with config, logging, and /healthz	2026-07-04 19:10:07 +02:00
vitest.config.ts	Add user, identity, session, and auth-support data model	2026-07-05 00:42:22 +02:00
vitest.global-setup.ts	Add the first-run setup wizard API with env-backed secret store (#80)	2026-07-11 15:10:28 +02:00