7 commits

Author	SHA1	Message	Date
Kenearos	66717014d0	harden(auth): cookie secure-by-default, sendMagicLink try/catch (Neutralität), :id-Validierung (qwen-Backend-Gate, verifiziert)	2026-07-07 23:07:32 +02:00
Kenearos	facbb48bbf	feat(auth): Stories 3.2/3.3 — Admin-Nutzerverwaltung (add/list/remove) + Last-Admin-Guard + CASCADE	2026-07-07 22:47:22 +02:00
Kenearos	846ca4f83a	feat(auth): Story 3.1 — /api/state pro Nutzer hinter Auth (Anti-IDOR), documents (user_id,key), Startup seed+migrate	2026-07-07 22:46:25 +02:00
Kenearos	0b25c7b493	feat(auth): Stories 2.3-2.5 — Auth-Routen (neutral request, scanner-sicheres confirm, me/logout, Notzugang) + cookie-parser	2026-07-07 22:41:11 +02:00
Kenearos	97e58903b8	feat(backend): automatisches taegliches SQLite-Online-Backup	2026-07-07 15:50:34 +02:00
Kenearos	45503f03ee	feat(backend): GET/PUT /api/state mit Dokument-Persistenz	2026-07-07 15:46:48 +02:00
Kenearos	3b0632c4b9	feat(backend): Express-Server liefert statisch + /api/health	2026-07-07 15:40:06 +02:00