curo1305 311dfa1513 feat(05-04): implement WebDAVBackend with SSRF guard and asyncio wrapping ...

- All 7 StorageBackend methods implemented as async coroutines
- validate_cloud_url() called in __init__ (SSRF at construct time) and before
  every asyncio.to_thread() call (D-17 defense-in-depth / T-05-04-01, T-05-04-02)
- _make_path() builds "docuvault/{user_id}/{document_id}{ext}" with urllib.parse.quote
  encoding on path segments (RESEARCH.md Pitfall 2)
- presigned_get_url and generate_presigned_put_url raise NotImplementedError (D-14)
- All webdavclient3 sync calls (upload_to, download_from, clean, info, check, mkdir)
  wrapped in asyncio.to_thread() per MinIOBackend pattern
- delete_object silently ignores missing file exceptions (StorageBackend ABC contract)

2026-05-28 21:09:25 +02:00

..

ai

feat(02-02): auth API endpoints + security hardening + Python 3.9 compat

2026-05-22 19:35:38 +02:00

api

feat(phase-4): complete UX redesign — FileManagerView, FolderTreeItem, test suite, and all Phase 4 fixes

2026-05-28 17:10:52 +02:00

db

feat(phase-4-05): document streaming proxy GET /api/documents/{id}/content (DOC-02)

2026-05-25 18:48:32 +02:00

deps

feat(03-03): add get_regular_user dep; wire auth + ownership into /api/documents/*

2026-05-23 20:05:34 +02:00

migrations

feat(phase-4): Alembic migration 0004 (pdf_open_mode, GIN FTS index, audit-logs bucket) + MinIOBackend.put_object_raw()

2026-05-25 18:30:28 +02:00

services

feat(05-02): implement cloud_cache.py and extend storage factory

2026-05-28 21:00:48 +02:00

storage

feat(05-04): implement WebDAVBackend with SSRF guard and asyncio wrapping

2026-05-28 21:09:25 +02:00

tasks

feat(phase-4-06): Celery daily audit export task + beat schedule (D-17)

2026-05-25 18:50:50 +02:00

tests

test(05-04): add failing RED tests for WebDAVBackend and NextcloudBackend

2026-05-28 21:07:18 +02:00

alembic.ini

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

celery_app.py

feat(phase-4-06): Celery daily audit export task + beat schedule (D-17)

2026-05-25 18:50:50 +02:00

config.py

feat(05-01): add Phase 5 cloud storage packages and config settings

2026-05-28 20:48:38 +02:00

Dockerfile

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

main.py

feat(phase-4-06): admin audit log viewer + CSV export (ADMIN-06)

2026-05-25 18:48:02 +02:00

pytest.ini

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

requirements.txt

feat(05-01): add Phase 5 cloud storage packages and config settings

2026-05-28 20:48:38 +02:00