My Weekly ToDo List - A web-based weekly task management app
mARTin-B78
3742ae52c6
Sicherheitsdurchgang vor dem geplanten Beta-Test mit Security-Scannern: - Login (authorize() in src/lib/auth.ts) hatte als einziger Auth-Endpunkt kein Rate-Limit, obwohl signup/reset-password/verify-email/resend-verification es bereits nutzen. Jetzt max. 8 Versuche pro E-Mail in 15 Minuten. - Fehlende Standardheader ergaenzt (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy), X-Powered-By abgeschaltet. Bewusst ohne CSP -- braucht eine eigene, getestete Whitelist fuer OAuth/Fonts/CDN. - npm audit fix (ohne --force): 24 -> 10 gemeldete Schwachstellen, keine Breaking Changes. Die verbleibenden 10 haengen an next@14 und next-auth@4 (siehe CHANGELOG "Known issues") und brauchen ein eigenes Major-Upgrade. Ausserdem zwei Betriebsfixes, die beim heutigen Deploy live auffielen: - scripts/update-app.sh setzt jetzt selbst PATH=/usr/local/bin:$PATH. Ohne Login-Shell fand es pm2 nicht und brach nach erfolgreichem Build beim Neustart ab -- die Instanz blieb dabei auf dem alten Stand, kein Datenverlust, aber ein unnoetiger manueller Eingriff. - tsconfig.json nimmt .next-build/types/**/*.ts mit auf; Next.js traegt das beim Bauen mit NEXT_DIST_DIR=.next-build sonst als nie eingecheckte Abweichung auf dem Produktionshost ein. v1.122.0 Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .claude | ||
| .github/workflows | ||
| .opencode | ||
| .planning | ||
| docs | ||
| prisma | ||
| public | ||
| scripts | ||
| spec | ||
| specs | ||
| src | ||
| tests | ||
| Version 01 | ||
| .dockerignore | ||
| .env.example | ||
| .eslintrc.json | ||
| .gitignore | ||
| build.pid | ||
| CHANGELOG.md | ||
| CLAUDE.md | ||
| clear-data.ts | ||
| COMMIT_SUMMARY.md | ||
| comprehensive-debug.js | ||
| debug-login-page.js | ||
| debug-signup.js | ||
| deploy.sh | ||
| docker-compose.dev.yml | ||
| docker-compose.local.yml | ||
| docker-compose.yml | ||
| Dockerfile | ||
| fill-data-v2.ts | ||
| fill-data.ts | ||
| fill-ext-events.js | ||
| fill-ext-events.ts | ||
| final_phase3_analysis.md | ||
| mock-prisma.ts | ||
| My-Weekly-ToDo-List.code-workspace | ||
| next-env.d.ts | ||
| next.config.js | ||
| opencode.json | ||
| package-lock.json | ||
| package.json | ||
| phase3_analysis.md | ||
| playwright.config.ts | ||
| postcss.config.js | ||
| query.js | ||
| README.md | ||
| SETUP.md | ||
| sonar-project.properties | ||
| tailwind.config.js | ||
| TEST_PLAN_SUMMARY.md | ||
| TEST_PLAN.md | ||
| test-account-setup.js | ||
| test-api.js | ||
| test-email.js | ||
| test-route.js | ||
| test-syno.js | ||
| tsconfig.json | ||
| tsconfig.tsbuildinfo | ||
My Weekly To Do List
A web-based weekly task management application that organizes to-dos and calendar events in a single, intuitive weekly view.
Features
- Weekly view of tasks and calendar events
- Drag and drop functionality between days
- Calendar integration with Google and Apple Calendar
- Responsive design for all devices
- Accessible user interface (WCAG 2.1 AA compliant)
Deployment with Docker
This application can be deployed using Docker and Docker Compose.
Prerequisites
- Docker Engine
- Docker Compose
Quick Start
- Clone the repository and navigate to the project directory
- Build and start the containers:
docker-compose up --build - Access the application at http://localhost:3000
Environment Variables
The application requires the following environment variables:
DATABASE_URL: PostgreSQL connection stringNEXTAUTH_SECRET: Secret for NextAuth.jsNEXT_PUBLIC_BASE_URL: Public URL of the applicationMICROSOFT_CLIENT_ID: Azure AD Application (client) ID for Microsoft LoginMICROSOFT_CLIENT_SECRET: Azure AD Application secret for Microsoft Login
Database Configuration
The application uses PostgreSQL for data storage. The Docker Compose setup includes a PostgreSQL service, but you can also connect to an external database by setting the DATABASE_URL accordingly.
Building for Production
To build the production version:
docker build -t my-weekly-todo-list .
Development
For development, you can run:
npm run dev
License
This project is licensed under the MIT License.