My Weekly ToDo List - A web-based weekly task management app
mARTin-B78
114131f9e4
Letzter offener Punkt aus dem Sicherheitsdurchgang vor dem Beta-Test: npm audit
meldete 24 Schwachstellen, davon mehrere kritisch in next und next-auth.
- next 14.2.35 -> 15.5.24 (patcht alles, was next@16 sonst erfordert haette --
ein Major-Sprung statt zwei; next 15 unterstuetzt weiterhin React 18)
- next-auth 4.24.13 -> 4.24.15, @auth/core per overrides auf 0.41.3 erzwungen
(next-auth pinnt es sonst exakt auf die verwundbare 0.34.3, als ungenutzten
optionalen Peer)
- nodemailer 7 -> 10 per overrides (next-auth haelt einen ungenutzten optionalen
Peer auf 7.x)
- postcss auf 8.5.28, auch next's eigene interne Kopie per overrides
- ungenutztes @auth/prisma-adapter entfernt (Projekt nutzt @next-auth/prisma-adapter)
npm audit: 24 -> 0.
Zwei echte Codeaenderungen dafuer noetig:
- Next.js 15: { params } in Routen-Handlern ist jetzt ein Promise. Einzige
betroffene Route: cross-sync/rules/[id].
- nodemailer.Transporter gibt es seit @types/nodemailer 8 nicht mehr als
Namespace-Property, nur noch als benannter Type-Export. Einzige Stelle:
src/lib/email.ts.
Ausserdem google-auth-library als direkte Abhaengigkeit deklariert (vorher nur
ueber googleapis transitiv gehofft) und per overrides auf eine Version gepinnt --
der frische package-lock.json aus den obigen Fixes hob sie sonst nicht mehr
passend, wodurch zwei inkompatible Kopien nebeneinander existierten und der
Typecheck brach.
Verifiziert: Typecheck, Lint, 79 Unit-Tests, Produktions-Build alle gruen.
Login-Seite, Sicherheitsheader und Auth-Middleware manuell im gebauten
Standalone-Server geprueft. Kein Playwright-E2E-Lauf (braucht echte DB/OAuth).
v1.123.0
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
||
|---|---|---|
| .claude | ||
| .github/workflows | ||
| .opencode | ||
| .planning | ||
| docs | ||
| prisma | ||
| public | ||
| scripts | ||
| spec | ||
| specs | ||
| src | ||
| tests | ||
| Version 01 | ||
| .dockerignore | ||
| .env.example | ||
| .eslintrc.json | ||
| .gitignore | ||
| build.pid | ||
| CHANGELOG.md | ||
| CLAUDE.md | ||
| clear-data.ts | ||
| COMMIT_SUMMARY.md | ||
| comprehensive-debug.js | ||
| debug-login-page.js | ||
| debug-signup.js | ||
| deploy.sh | ||
| docker-compose.dev.yml | ||
| docker-compose.local.yml | ||
| docker-compose.yml | ||
| Dockerfile | ||
| fill-data-v2.ts | ||
| fill-data.ts | ||
| fill-ext-events.js | ||
| fill-ext-events.ts | ||
| final_phase3_analysis.md | ||
| mock-prisma.ts | ||
| My-Weekly-ToDo-List.code-workspace | ||
| next-env.d.ts | ||
| next.config.js | ||
| opencode.json | ||
| package-lock.json | ||
| package.json | ||
| phase3_analysis.md | ||
| playwright.config.ts | ||
| postcss.config.js | ||
| query.js | ||
| README.md | ||
| SETUP.md | ||
| sonar-project.properties | ||
| tailwind.config.js | ||
| TEST_PLAN_SUMMARY.md | ||
| TEST_PLAN.md | ||
| test-account-setup.js | ||
| test-api.js | ||
| test-email.js | ||
| test-route.js | ||
| test-syno.js | ||
| tsconfig.json | ||
| tsconfig.tsbuildinfo | ||
My Weekly To Do List
A web-based weekly task management application that organizes to-dos and calendar events in a single, intuitive weekly view.
Features
- Weekly view of tasks and calendar events
- Drag and drop functionality between days
- Calendar integration with Google and Apple Calendar
- Responsive design for all devices
- Accessible user interface (WCAG 2.1 AA compliant)
Deployment with Docker
This application can be deployed using Docker and Docker Compose.
Prerequisites
- Docker Engine
- Docker Compose
Quick Start
- Clone the repository and navigate to the project directory
- Build and start the containers:
docker-compose up --build - Access the application at http://localhost:3000
Environment Variables
The application requires the following environment variables:
DATABASE_URL: PostgreSQL connection stringNEXTAUTH_SECRET: Secret for NextAuth.jsNEXT_PUBLIC_BASE_URL: Public URL of the applicationMICROSOFT_CLIENT_ID: Azure AD Application (client) ID for Microsoft LoginMICROSOFT_CLIENT_SECRET: Azure AD Application secret for Microsoft Login
Database Configuration
The application uses PostgreSQL for data storage. The Docker Compose setup includes a PostgreSQL service, but you can also connect to an external database by setting the DATABASE_URL accordingly.
Building for Production
To build the production version:
docker build -t my-weekly-todo-list .
Development
For development, you can run:
npm run dev
License
This project is licensed under the MIT License.