Update SecurityRoleController to use Long timestamps instead of LocalDateTime for mock data
Add JavaTimeModule to ObjectMapper to handle LocalDateTime serialization
Fix build errors: convert Date to LocalDateTime and String to RoleRightSettingType
Development mode: Remove all security requirements to focus on functionality
Make role rights endpoint publicly accessible to fix 403 error
Update SecurityRoleController to handle *** token and access Redis directly
Fix *** cookie to be client-accessible in logout endpoint - Changed setHttpOnly from true to false - *** should be client-accessible across all sites
Remove cookie-setting from /validate-otk endpoint
Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds()...
Reduce *** ID length from 512 to 128 characters
Changes: - ***_ID_LENGTH: 512 -> 128 (64 bytes of entropy) - Updated all documentation and comments - Updated logging to show full 128-char ID - OTK length rema...
Increase *** ID length to 512 characters for enhanced security
- *** ID: 512-char hex string (256 bytes of secure random data) - OTK ID: 64-char hex string (32 bytes - unchanged) - Updated generateSecureHexString() to accep...
Implement new *** session model with 64-char GUID
- Add KSessionService for simplified session management - *** ID is now a 64-char hex string (not encoded KToken) - Redis key format: ***<64-char-guid> - Redis ...
Use session cookies instead of persistent cookies with maxAge
Add usernameAlias, memberEmail, and countryAbbreviation to user-info endpoint
Remove cookie domain attribute for proper per-subdomain cookie setting
Update session naming - use *** cookie and SESSION<guid> Redis keys per SSO specification
Use shared library Redis configuration instead of local config
Implement Redis read/write splitting - writes to master (10.8.0.1), reads from replica
Trigger rebuild with latest shared library (MemberRightsApplied column name fix)
Update password pepper to match KamoInitializerService - Set pepper to 'f09kf32j0sdfsdfd' to ensure password hashing consistency across services
Password hash generator endpoint for testing/admin - POST **************** to create proper PBKDF2 hashes
Provide specific error messages for account validation failures - Users now see exact reason **************** instead of generic message
Remove non-existent u.is_active column from SQL query - The code only uses is_active from members table, not users table
Update workflow to use kamowssecurity-deployment instead of securityservice-deployment
Rename SecurityService deployment from securityservice-deployment to kamowssecurity-deployment
Disable Vault and add required parameters to prevent config validation errors
Fix Redis SSL configuration in k8s ConfigMap - add ssl.enabled property to prevent boolean conversion error
Fix Redis SSL configuration in k8s ConfigMap - change from boolean to object with enabled property
Fix Redis SSL configuration - change from boolean to object with enabled property
Fix Redis configuration
- Remove SSL configuration (was causing type conversion error) - Remove password requirement for local redis-slave service - Set host to **************** (local...
Fix database connection settings
- Update database URL to connect to 10.8.0.1:3306 directly - Change username from root to kamo - Update secret reference from root-password to DB_PASSWORD - Rem...
Fix SecurityService deployment configuration
- Update ConfigMap with complete application.yml including database, Redis, and external service configs - Update Deployment to mount ConfigMap as application.y...
Fix Kubernetes deployment: remove missing secret references
- Updated k8s/ manifests to match deploy/k8s/base/ configuration - Removed references to non-existent mysql-auth and *** secrets - Simplified ConfigMap to basic...
Fix Kubernetes manifests: update from kamowebregister to securityservice
- Updated deployment.yaml: name, labels, container name, and port (8080) - Updated service.yaml: name, selector, and target port (8080) - Updated configmap.yaml...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.