My Weekly ToDo List - A web-based weekly task management app
mARTin-B78
a20cc6dc65
L4 aus dem TODO-Block Sicherheitsdurchgang. Bewusst vorsichtig: die Policy laeuft zunaechst nur als "Content-Security-Policy-Report-Only" und blockiert nichts, meldet aber ueber den neuen Endpunkt POST /api/csp-report jeden Verstoss (console.error/PM2). Whitelist aus dem tatsaechlichen Code abgeleitet, nicht geraten: - fonts.googleapis.com/fonts.gstatic.com: FontPicker.tsx/WeeklyView.tsx laden Nutzer-Schriftarten zur Laufzeit per <link> nach - 'unsafe-inline' fuer script-src/style-src: Next.js' App-Router-Hydration und der eine dangerouslySetInnerHTML-Block in WeeklyView.tsx (View-Transition-Styles) brauchen das ohne Nonce-Infrastruktur (eigener, groesserer Umbau) - Kein <iframe>, keine Drittanbieter-Bilder, keine clientseitigen fetch()-Aufrufe zu fremden Domains gefunden. FontAwesome laeuft als React-Komponente im eigenen Bundle. OAuth-Redirects sind Top-Level-Navigation, von CSP nicht betroffen. src/middleware.ts: /api/csp-report von der Login-Pflicht ausgenommen -- der Browser schickt Reports automatisch, auch von der nicht angemeldeten Login-Seite. Scharf schalten (Report-Only aus dem Header-Namen entfernen) erst, nachdem ein paar Tage Reports durchgesehen wurden -- die OAuth-Flows (Google/Microsoft/Apple/Notion) liessen sich hier nicht interaktiv durchklicken. Verifiziert: Typecheck, Lint, 85 Unit-Tests, Produktions-Build, Header und Report-Endpunkt manuell im gebauten Standalone-Server geprueft. v1.125.0 Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .claude | ||
| .github/workflows | ||
| .opencode | ||
| .planning | ||
| docs | ||
| prisma | ||
| public | ||
| scripts | ||
| spec | ||
| specs | ||
| src | ||
| tests | ||
| Version 01 | ||
| .dockerignore | ||
| .env.example | ||
| .eslintrc.json | ||
| .gitignore | ||
| build.pid | ||
| CHANGELOG.md | ||
| CLAUDE.md | ||
| clear-data.ts | ||
| COMMIT_SUMMARY.md | ||
| comprehensive-debug.js | ||
| debug-login-page.js | ||
| debug-signup.js | ||
| deploy.sh | ||
| docker-compose.dev.yml | ||
| docker-compose.local.yml | ||
| docker-compose.yml | ||
| Dockerfile | ||
| fill-data-v2.ts | ||
| fill-data.ts | ||
| fill-ext-events.js | ||
| fill-ext-events.ts | ||
| final_phase3_analysis.md | ||
| mock-prisma.ts | ||
| My-Weekly-ToDo-List.code-workspace | ||
| next-env.d.ts | ||
| next.config.js | ||
| opencode.json | ||
| package-lock.json | ||
| package.json | ||
| phase3_analysis.md | ||
| playwright.config.ts | ||
| postcss.config.js | ||
| query.js | ||
| README.md | ||
| SETUP.md | ||
| sonar-project.properties | ||
| tailwind.config.js | ||
| TEST_PLAN_SUMMARY.md | ||
| TEST_PLAN.md | ||
| test-account-setup.js | ||
| test-api.js | ||
| test-email.js | ||
| test-route.js | ||
| test-syno.js | ||
| tsconfig.json | ||
| tsconfig.tsbuildinfo | ||
My Weekly To Do List
A web-based weekly task management application that organizes to-dos and calendar events in a single, intuitive weekly view.
Features
- Weekly view of tasks and calendar events
- Drag and drop functionality between days
- Calendar integration with Google and Apple Calendar
- Responsive design for all devices
- Accessible user interface (WCAG 2.1 AA compliant)
Deployment with Docker
This application can be deployed using Docker and Docker Compose.
Prerequisites
- Docker Engine
- Docker Compose
Quick Start
- Clone the repository and navigate to the project directory
- Build and start the containers:
docker-compose up --build - Access the application at http://localhost:3000
Environment Variables
The application requires the following environment variables:
DATABASE_URL: PostgreSQL connection stringNEXTAUTH_SECRET: Secret for NextAuth.jsNEXT_PUBLIC_BASE_URL: Public URL of the applicationMICROSOFT_CLIENT_ID: Azure AD Application (client) ID for Microsoft LoginMICROSOFT_CLIENT_SECRET: Azure AD Application secret for Microsoft Login
Database Configuration
The application uses PostgreSQL for data storage. The Docker Compose setup includes a PostgreSQL service, but you can also connect to an external database by setting the DATABASE_URL accordingly.
Building for Production
To build the production version:
docker build -t my-weekly-todo-list .
Development
For development, you can run:
npm run dev
License
This project is licensed under the MIT License.