Repository navigation

Backend security stack and Flyway-style migrations for the app and the server - #5961

Merged

shai-almog merged 162 commits into

masterfrom

backend-security-and-migrations

Oct 8, 2026

Merged

Backend security stack and Flyway-style migrations for the app and the server#5961
shai-almog merged 162 commits into
masterfrom
backend-security-and-migrations

Commits on Oct 6, 2026
- Flyway-style migrations: one engine for the app database and the backend
  
  shai-almog
  and
  claude
  committed
  5853ffd
- Compile migration scripts into the build
  
  shai-almog
  and
  claude
  committed
  f64bdc3
- Migration goals, an on-device migration test, and the guide chapters
  
  shai-almog
  and
  claude
  committed
  948cf02
- Backend migrations: for-each loops and a preserved cause
  
  shai-almog
  and
  claude
  committed
  9f66e47
- Backend: a slot for a security layer in the request path, and @Order
  
  shai-almog
  and
  claude
  committed
  128d323
- Backend: a security layer in the shape of Spring Security
  
  shai-almog
  and
  claude
  committed
  6af16e0
- Build: link the security layer for a chain bean, and bind who is signed in
  
  shai-almog
  and
  claude
  committed
  f786c91
- Backend tests: run as a user, and send a CSRF token or credentials
  
  shai-almog
  and
  claude
  committed
  a8358b4
- Migrations: the same history on the translated runtime and the JVM
  
  shai-almog
  and
  claude
  committed
  013c59d
- Backend crypto: signatures, HMAC and PBKDF2 over any digest, AES-GCM
  
  shai-almog
  and
  claude
  committed
  f23f731
- Backend: keys in PEM and JWK, signed tokens, and JWTs under public key algorithms
  
  shai-almog
  and
  claude
  committed
  3d0797c
- Backend security: a JWT resource server
  
  shai-almog
  and
  claude
  committed
  e79fffa
- Backend security: API keys
  
  shai-almog
  and
  claude
  committed
  df41aff
- Backend API reference: a server's own description of a package it shares in part
  
  shai-almog
  and
  claude
  committed
  7746acc
- Backend: where a request came from, rate limits, and a bound on password checks
  
  shai-almog
  and
  claude
  committed
  f6e501a
- JWT claim validator: hand the test an Object, and compare the limiter's eviction
  
  shai-almog
  and
  claude
  committed
  d599ebb
- Backend security: method security, compiled at build time
  
  shai-almog
  and
  claude
  committed
  1c1478b
- Backend security: a server links the security it declares, and no other
  
  shai-almog
  and
  claude
  committed
  513baee
- Backend: a refused WebSocket handshake is answered with its headers
  
  shai-almog
  and
  claude
  committed
  0acc604
- Backend security: remember-me, and one way of signing in to a session
  
  shai-almog
  and
  claude
  committed
  7e65e14
- Backend security: a second factor at sign-in
  
  shai-almog
  and
  claude
  committed
  2f6827d
- Backend security: a schema of its own, and stores in the database
  
  shai-almog
  and
  claude
  committed
  580ff1c
- Backend tests: a request with an accepted token or API key
  
  shai-almog
  and
  claude
  committed
  26d6f09
- Backend security: keep the session sign-in out of a server that has none
  
  shai-almog
  and
  claude
  committed
  a592d1d
- Backend build: leave out of the binary the natives nothing calls
  
  shai-almog
  and
  claude
  committed
  f02a235
- Backend security: sign-in through another provider, with OAuth2 and OpenID Connect
  
  shai-almog
  and
  claude
  committed
  cc39ad3
- Backend security: an authorization server, with refresh tokens and the device grant
  
  shai-almog
  and
  claude
  committed
  6a338ef
- Backend linking: a server that signs in elsewhere, and one that issues tokens
  
  shai-almog
  and
  claude
  committed
  ea0e40b
- Authorization server: a device is approved only from the question put to the session
  
  shai-almog
  and
  claude
  committed
  7fd36bb
- Authorization server docs: what a method throws, before its parameters
  
  shai-almog
  and
  claude
  committed
  1652c88
- Backend Checkstyle: verify fails on an error, and the seven that were there
  
  shai-almog
  and
  claude
  committed
  af7086d
- Backend docs: a reference in AsyncTask that resolved nowhere, and package-docs written down
  
  shai-almog
  and
  claude
  committed
  a18f64c
- OAuth2 login: hold an answer to its issuer, and an ID token to its access token
  
  shai-almog
  and
  claude
  committed
  7cacc7d
- Account linking: GitHub's verified address comes from its list of them
  
  shai-almog
  and
  claude
  committed
  108fa54
- Backend security: the session keeps the kind of sign-in, through codecs each mechanism brings
  
  shai-almog
  and
  claude
  committed
  45fc61f
- Backend passkeys: a CBOR reader for what an authenticator sends, and COSE keys
  
  shai-almog
  and
  claude
  committed
  ca3cb45
- Backend passkeys: the registration and sign-in ceremonies
  
  shai-almog
  and
  claude
  committed
  4947889
- Backend passkeys: handles and credentials in the database
  
  shai-almog
  and
  claude
  committed
  38757d0
- Backend security: http.webAuthn(), with the endpoints of the two ceremonies
  
  shai-almog
  and
  claude
  committed
  10b5a59
- Backend PMD: thirteen findings of rules PR CI forbids, left by the security layer
  
  shai-almog
  and
  claude
  committed
  9035828
- Backend passkeys: what the Checkstyle and PMD gates said of them
  
  shai-almog
  and
  claude
  committed
  0e2ea3e
- Backend linking: a server that signs in with passkeys, and nobody else carrying them
  
  shai-almog
  and
  claude
  committed
  14a7d2e
- CLAUDE.md: which of the backend's three gates a local build enforces
  
  shai-almog
  and
  claude
  committed
  6459951
- CLAUDE.md: the PMD report held fifteen findings, not thirteen
  
  shai-almog
  and
  claude
  committed
  ae3e753
- OIDC client: a token store in secure storage, and two ways the plain one lost a session
  
  shai-almog
  and
  claude
  committed
  8e03ae0
- Requests that carry a token and renew it on a 401, and the device grant on OidcClient
  
  shai-almog
  and
  claude
  committed
  3951f35
- Developer guide: a chapter on backend security
  
  shai-almog
  and
  claude
  committed
  dbd9a13
- Developer guide: signing an app in against a Codename One backend
  
  shai-almog
  and
  claude
  committed
  6014a73
- Migrations: a server with scripts could not be translated
  
  shai-almog
  and
  claude
  committed
  3026d01
- Device grant: an answer with no session was a 500, and three comments the code contradicts
  
  shai-almog
  and
  claude
  committed
  b963e2b
- The CI test server signs users in, issues tokens and guards an API
  
  shai-almog
  and
  claude
  committed
  934d0ee
- Device tests: sign in to the backend, call what it guards, and have a token renewed
  
  shai-almog
  and
  claude
  committed
  84b8bdf
- Backend security: the path check belongs to the chain that claims the request
  
  shai-almog
  and
  claude
  committed
  7e94191
- Backend security: a second factor holds for every way of presenting a first
  
  shai-almog
  and
  claude
  committed
  d62b279
- Authorization server: an access token's audience is the resource server
  
  shai-almog
  and
  claude
  committed
  2c0dfb1
- Authorization server: a secret nothing can check stops the start
  
  shai-almog
  and
  claude
  committed
  8ecaab7
- OAuth2 login: Sign in with Apple in the configuration stops the start
  
  shai-almog
  and
  claude
  committed
  0b64bce
- Backend: cn1.security.schema.enabled at run time no longer does nothing
  
  shai-almog
  and
  claude
  committed
  6f16015
- Backend security: the two built-in limiters are configured, and can be shared
  
  shai-almog
  and
  claude
  committed
  734e0dc
- Device grant: the verification endpoint answers in JSON too
  
  shai-almog
  and
  claude
  committed
  7b25564
- Backend: reason phrases, the scope a bearer challenge can name, and a test's 403
  
  shai-almog
  and
  claude
  committed
  732657b
- Migrations: a module that drops its last script loses the compiled ones
  
  shai-almog
  and
  claude
  committed
  dc52dbc
- Migrate goals: a module that asked for the security tables gets them
  
  shai-almog
  and
  claude
  committed
  d8652f2
- The CI test server: an audience and an issuer on its tokens, and the JSON device form
  
  shai-almog
  and
  claude
  committed
  0d93f66
- NetworkManager.setAuthorizer: base URLs are compared as origins
  
  shai-almog
  and
  claude
  committed
  fd9398f
- OIDC authorizer: renew a token before it expires, not after it is refused
  
  shai-almog
  and
  claude
  committed
  852702f
- OIDC client: the issuer of a response and the signature of an ID token
  
  shai-almog
  and
  claude
  committed
  7459a0a
- Backend gates: a clock set outside its lock, and three names spelled in full
  
  shai-almog
  and
  claude
  committed
  5584dfe
- Developer guide: the built-in counters are per process only until a limiter bean says otherwise
  
  shai-almog
  and
  claude
  committed
  7aa6d35
- Request authorizers: their state belongs to the EDT, and nothing is locked
  
  shai-almog
  and
  claude
  committed
  02262d1
- Backend: every key the build links by is refused at run time the same way
  
  shai-almog
  and
  claude
  committed
  92978b1
- Migrate goals: a module with only a library's set gets them, and nine versions get nine names
  
  shai-almog
  and
  claude
  committed
  148422b
- Backend security: two RateLimiter beans are chosen between or refused, never ignored
  
  shai-almog
  and
  claude
  committed
  3851e3e
- Second factor: one address that has the password cannot keep the user out
  
  shai-almog
  and
  claude
  committed
  cd1c64f
- NetworkManager.addToQueue: no path that hands a known null on
  
  shai-almog
  and
  claude
  committed
  8a5054c
- Build-time settings: a key that names an unset variable asks for nothing
  
  shai-almog
  and
  claude
  committed
  d7c3bbd
Commits on Oct 7, 2026
Commits on Oct 8, 2026

Commits

Commits on Oct 6, 2026

Commits on Oct 7, 2026