Add GET /api/security/roles/{id} endpoint to fetch single role with rights
Use getRoleByIdWithRights to prevent NullPointerException in DTO conversion
Trigger rebuild to use updated kamo-shared-library with description field support
Reload role after updating rights to populate rights collection for DTO conversion
Convert string rightType to RoleRightType enum in create/update role endpoints
Extract orgID directly from session data instead of loading full Organization entity
Fix compilation error: pass Organization object instead of Long to getRolesByOrganization
Replace mock data with real database queries for security roles
Update SecurityRoleController to use Long timestamps instead of LocalDateTime for mock data
Add JavaTimeModule to ObjectMapper to handle LocalDateTime serialization
Fix build errors: convert Date to LocalDateTime and String to RoleRightSettingType
Development mode: Remove all security requirements to focus on functionality
Make role rights endpoint publicly accessible to fix 403 error
Update SecurityRoleController to handle *** token and access Redis directly
Fix *** cookie to be client-accessible in logout endpoint - Changed setHttpOnly from true to false - *** should be client-accessible across all sites
Remove cookie-setting from /validate-otk endpoint
Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds()...
Reduce *** ID length from 512 to 128 characters
Changes: - ***_ID_LENGTH: 512 -> 128 (64 bytes of entropy) - Updated all documentation and comments - Updated logging to show full 128-char ID - OTK length rema...
Increase *** ID length to 512 characters for enhanced security
- *** ID: 512-char hex string (256 bytes of secure random data) - OTK ID: 64-char hex string (32 bytes - unchanged) - Updated generateSecureHexString() to accep...
Implement new *** session model with 64-char GUID
- Add KSessionService for simplified session management - *** ID is now a 64-char hex string (not encoded KToken) - Redis key format: ***<64-char-guid> - Redis ...
Use session cookies instead of persistent cookies with maxAge
Add usernameAlias, memberEmail, and countryAbbreviation to user-info endpoint
Remove cookie domain attribute for proper per-subdomain cookie setting
Update session naming - use *** cookie and SESSION<guid> Redis keys per SSO specification
Use shared library Redis configuration instead of local config
Implement Redis read/write splitting - writes to master (10.8.0.1), reads from replica
Trigger rebuild with latest shared library (MemberRightsApplied column name fix)
Update password pepper to match KamoInitializerService - Set pepper to 'f09kf32j0sdfsdfd' to ensure password hashing consistency across services
Password hash generator endpoint for testing/admin - POST **************** to create proper PBKDF2 hashes
Provide specific error messages for account validation failures - Users now see exact reason **************** instead of generic message
Remove non-existent u.is_active column from SQL query - The code only uses is_active from members table, not users table
Update workflow to use kamowssecurity-deployment instead of securityservice-deployment
Rename SecurityService deployment from securityservice-deployment to kamowssecurity-deployment
Disable Vault and add required parameters to prevent config validation errors
Fix Redis SSL configuration in k8s ConfigMap - add ssl.enabled property to prevent boolean conversion error
เหมือนที่คุณเห็นการขนส่ง?
ทุก คน ที่ ได้ รับ การ ปรับ ปรุง เหล่า นี้ จะ ลง ไป ใน ที่ ทํา งาน ของ คุณ โดย อัตโนมัติ. เริ่มให้อิสระและดูมันเติบโตสัปดาห์แล้วสัปดาห์เล่า.