julien/apf_portal

Fork 0

Files

T

History

Julien Gautier ad369d872a

CI / scan (pull_request) Successful in 2m47s

Details

CI / commits (pull_request) Successful in 2m47s

Details

CI / check (pull_request) Successful in 2m56s

Details

CI / a11y (pull_request) Successful in 2m40s

Details

CI / perf (pull_request) Successful in 5m51s

Details

fix(portal-bff): align admin entra role name with Portal.Admin

The AdminRoleGuard was matching on `admin`, but the Entra app
registration declares the role with value `Portal.Admin`. Sessions
were established with `roles: []`, so every authenticated user got
a 403 on `/api/admin/audit` and `/api/admin/users`.

Single source of truth: the `ADMIN_ROLE` constant in
admin-role.guard.ts. The spec already imports the constant, so the
behaviour rolls through unchanged.

Doc-comment touches in admin-role.guard.ts, admin.controller.ts and
audit.service.ts keep the inline references accurate; ADR-0020,
docs/architecture.md and CLAUDE.md updated to the new name.

2026-05-15 10:29:51 +02:00

decisions

fix(portal-bff): align admin entra role name with Portal.Admin

2026-05-15 10:29:51 +02:00

setup

chore: relocate ADRs from decisions/ to docs/decisions/ to consolidate documentation

2026-04-30 18:57:59 +02:00

architecture.md

fix(portal-bff): align admin entra role name with Portal.Admin

2026-05-15 10:29:51 +02:00

development.md

chore(ci): auto-merge low-risk renovate updates (#77 )

2026-05-10 03:58:01 +02:00

README.md

docs(development): add observability dev-loop section (#73 )

2026-05-10 02:14:46 +02:00

README.md

Documentation index

This is the entry point to all project documentation. It is maintained automatically: any addition, rename, or removal of a .md file under docs/ must be reflected here in the same change.

Conventions

Documentation is written in English.
One topic per file. Group related files into a folder when there are three or more.
Cross-reference with relative links so they keep working in GitHub, IDEs, and exported sites.
For architectural decisions, do not add them here — they belong in decisions/ as MADR 4.0.0 ADRs.

Sections

Daily development

development.md — repo layout, prerequisites, initial setup, daily commands, observability dev-loop (Jaeger UI, log ↔ trace correlation), dependency updates (Renovate), conventional commit cycle. Day-to-day reference for working on the project.

Architecture

architecture.md — cross-cutting Mermaid diagrams: C4 system context, C4 containers, Nx module boundaries, CI/CD pipeline. Single-decision diagrams (auth sequence, ERD, etc.) live inline in their ADR.

Onboarding & environment

Setup guides for new contributors:

setup/01-wsl-terminal-setup.md — modern WSL terminal (Zsh + Powerlevel10k + CLI tools)
setup/02-dev-web-stack.md — Node via nvm, pnpm via corepack, Docker
setup/03-angular-nx-monorepo.md — Angular + Nx monorepo bootstrap

Operations & runbooks

Empty — to be populated when we deploy.

Security, performance, accessibility

Empty — placeholders to be filled with rationale docs alongside their corresponding ADRs.