Joseph Spiker

spikerj opened issue spikerj/spikersoft-issues#423

2026-07-05 22:37:10 +00:00

[uploads] FileProcessingService ctor does filesystem I/O → 500s blog-upload endpoints on unwritable path

spikerj closed issue spikerj/spikersoft-issues#422

2026-07-05 22:34:21 +00:00

[health-checks] HTTP probes have no timeout → a down dependency hangs /health up to ~75s

spikerj commented on issue spikerj/spikersoft-issues#422

2026-07-05 22:34:14 +00:00

[health-checks] HTTP probes have no timeout → a down dependency hangs /health up to ~75s

Resolved in spikersoft-backend PR #104 (merged to master). Bound all five HTTP health-check probes (Keycloak/InfluxDB/RabbitMQ/TileServerGL/DnsServer) to a 10s HttpClient.Timeout in…

spikerj opened issue spikerj/spikersoft-issues#422

2026-07-05 22:33:24 +00:00

[health-checks] HTTP probes have no timeout → a down dependency hangs /health up to ~75s

spikerj commented on issue spikerj/spikersoft-issues#421

2026-07-05 22:18:33 +00:00

[dev-ex/Mac] No turnkey local full-app browse — frontend dev expects API :33333, Mac-native API binds :5290/5291

Sub-finding fixed + merged

The LessonVideoStagingService ctor-does-filesystem-I/O fragility (the 500 on /api/Lessons) is fixed on backend master — spikersoft-backend#103 (merged):…

spikerj commented on issue spikerj/spikersoft-issues#421

2026-07-05 22:13:15 +00:00

[dev-ex/Mac] No turnkey local full-app browse — frontend dev expects API :33333, Mac-native API binds :5290/5291

✅ Proven working recipe (real Keycloak, native API on :33333)

Stood the full app up locally and browsed it — https://localhost:4200 → local API :33333 → local infra + real `ids.spikers…

spikerj opened issue spikerj/spikersoft-issues#421

2026-07-05 22:01:12 +00:00

[dev-ex/Mac] No turnkey local full-app browse — frontend dev expects API :33333, Mac-native API binds :5290/5291

spikerj opened issue spikerj/spikersoft-issues#420

2026-07-05 21:37:12 +00:00

[i18n] 94 devTools keys missing Spanish (commonCommandsHelper command catalog)

spikerj commented on issue spikerj/spikersoft-issues#401

2026-07-05 21:35:57 +00:00

[Security][CRITICAL] SignalR hubs missing class-level [Authorize] — CodeExecutionHub / DashboardHub / ClusterHub open to anonymous connections

✅ Item 1 (DashboardHub + ClusterHub gate) — landed on master

Both coordinated halves are merged:

FE — spikersoft-angular#134: accessTokenFactory (Keycloak token) on `dashboard-metri…

spikerj opened issue spikerj/spikersoft-issues#419

2026-07-05 21:33:02 +00:00

[lint coverage] ~75 library projects are unlinted by CI + their eslint configs reference uninstalled plugins

spikerj opened issue spikerj/spikersoft-issues#418

2026-07-05 20:25:38 +00:00

[CI drift] lesson-video-processor is deployed but has NO build workflow → orphaned image

spikerj commented on issue spikerj/spikersoft-issues#413

2026-07-05 20:25:10 +00:00

[Infra][Architecture] Provider-agnostic object storage (MinIO -> S3/Azure Blob) to replace GlusterFS/host-path model

Prerequisite for the production deployment model INF-2 #414.

spikerj commented on issue spikerj/spikersoft-issues#404

2026-07-05 20:25:09 +00:00

[Security][Go-live] Move all secrets out of source control & establish secret injection

Prerequisite for the production deployment model INF-2 #414.

spikerj commented on issue spikerj/spikersoft-issues#414

2026-07-05 20:25:08 +00:00

[Infra][Architecture] Production deployment & secrets model for real hardware

Depends on INF-1 #413 (object storage — un-pins Swarm placement) and CR-1 #404 (secrets injection).

spikerj commented on issue spikerj/spikersoft-issues#415

2026-07-05 20:25:07 +00:00

[Security][Go-live] Add authorization FallbackPolicy; lock down anonymous-by-omission API endpoints

Part of the anonymous-vs-authenticated surface epic #417. Sequence the FallbackPolicy flip behind the anonymous route walk (#314).

spikerj commented on issue spikerj/spikersoft-issues#416

2026-07-05 20:25:07 +00:00

[Security] Remove anonymous access to Trails mutating endpoints (DELETE /{id}, DELETE /purge)

Child of the anonymous-vs-authenticated surface epic #417.

spikerj commented on issue spikerj/spikersoft-issues#417

2026-07-05 20:25:06 +00:00

[Epic][Architecture] Anonymous-vs-authenticated surface — explicit public/protected split

Children (this batch): CR-2 transport layer #415, Trails anonymous-delete #416. Related: #401 (SignalR hubs), #314 / #307 (anonymous Playwright walk — the regression net), #312, #298.

spikerj opened issue spikerj/spikersoft-issues#417

2026-07-05 20:24:45 +00:00

[Epic][Architecture] Anonymous-vs-authenticated surface — explicit public/protected split

spikerj opened issue spikerj/spikersoft-issues#416

2026-07-05 20:24:44 +00:00

[Security] Remove anonymous access to Trails mutating endpoints (DELETE /{id}, DELETE /purge)

spikerj opened issue spikerj/spikersoft-issues#415

2026-07-05 20:24:42 +00:00

[Security][Go-live] Add authorization FallbackPolicy; lock down anonymous-by-omission API endpoints