curo1305 4a42ccee5a feat(05-09): authenticated document preview via fetch + Blob URL ...

- Add fetchDocumentContent() to client.js: fetch with Bearer auth, 401 refresh
  retry pattern, returns raw Response (not parsed JSON) for blob() calls
- Replace iframe :src=proxyUrl (unauthenticated) in DocumentPreviewModal.vue
  with authenticated fetch → blob → URL.createObjectURL; loading/error states;
  URL.revokeObjectURL on unmount to prevent memory leaks
- Replace window.open(rawUrl) in DocumentView.vue openPdf() with
  fetchDocumentContent → blob → objectUrl → window.open; 60s auto-revoke
- Frontend build exits 0 with zero errors
- Closes T-05-09-04: no persistent unauthenticated content exposure

2026-05-30 11:18:01 +02:00

.planning

docs(05): create UAT gap closure plans 09-11

2026-05-30 10:39:47 +02:00

backend

feat(05-09): PATCH /documents/{id} endpoint + cloud-aware Celery re-analyze

2026-05-30 11:16:01 +02:00

docker/postgres/initdb.d

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

frontend

feat(05-09): authenticated document preview via fetch + Blob URL

2026-05-30 11:18:01 +02:00

.env.example

feat(05-01): add Phase 5 cloud storage packages and config settings

2026-05-28 20:48:38 +02:00

.gitignore

feat(02-02): frontend auth store, router guard, Login/Register views

2026-05-22 19:45:21 +02:00

CLAUDE.md

feat(phase-4): complete UX redesign — FileManagerView, FolderTreeItem, test suite, and all Phase 4 fixes

2026-05-28 17:10:52 +02:00

docker-compose.yml

Fix Phase 3 UAT blockers: MinIO presigned URL hostname, CORS, admin flush→commit, auth refresh race

2026-05-25 11:30:41 +02:00

TEST_ACCOUNTS.md

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

test_integration.py

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

S

Description

No description provided

3 MiB

Languages

Python 65.7%

Vue 22.8%

JavaScript 11.3%