3 Commits

Author	SHA1	Message	Date
alexei.dolgolyov	1f81ca9eb0	fix(docker-watcher): address final review findings ... Security: - Move config export behind auth middleware - Validate OIDC callback token before storing in localStorage - Use constant-time comparison for webhook secret - Encrypt OIDC client secret at rest (like registry tokens) Performance: - Make TriggerDeploy async from HTTP handlers (return deploy ID immediately, run pipeline in background goroutine) Robustness: - Wrap api.ts res.json() in try/catch for non-JSON responses i18n: - Replace ~20 hardcoded English validation messages with $t() calls - Localize ConfirmDialog cancel button, InstanceCard confirm titles, ProjectCard instance/instances pluralization - Add validation keys to both en.json and ru.json	2026-03-28 00:14:53 +03:00
alexei.dolgolyov	a3aa5912d9	feat(docker-watcher): phase 14 - frontend polish & modern UI ... Design system with CSS custom properties (light/dark themes). 38 Lucide SVG icon components. Dark mode with system preference. EN/RU localization with i18n store. Skeleton loaders, empty states, toggle switches, micro-interactions. Responsive sidebar with mobile hamburger menu. All pages polished with consistent styling.	2026-03-27 23:53:09 +03:00
alexei.dolgolyov	757c72eea1	fix(docker-watcher): phase 8 security fixes ... Remove webhook secret from logs and API response. Add auth-pending note to router. Fix decrypt fallback that would use ciphertext as auth token on decrypt failure.	2026-03-27 22:10:00 +03:00