mateclaw/mateclaw-server/src/main/java/vip/mate/config
matevip 982c6c048c feat(security): gate Swagger/OpenAPI UI behind mateclaw.openapi.expose-ui flag
- explicit SecurityConfig authorization for /swagger-ui*, /v3/api-docs*, /webjars/**
- public for local/default profile; admin-only (ROLE_ADMIN) by default in production DB profiles
- override via MATECLAW_OPENAPI_EXPOSE_UI; add RANDOM_PORT integration tests and docs
2026-06-24 10:42:46 +08:00
..
AsyncSecurityConfig.java feat(db): support KingbaseES (人大金仓) domestic database (#324) 2026-06-14 10:30:09 +08:00
ConversationWindowProperties.java chore: drop external project name references from code comments 2026-05-20 08:09:43 +08:00
DatabaseBootstrapRunner.java feat(dashboard): show the connected database on the dashboard 2026-06-15 08:47:53 +08:00
FlywayRepairConfig.java refactor(ui): minimalist login redesign, MCP fixes, Flyway upgrade compatibility 2026-04-11 23:01:08 +08:00
GraphObservationProperties.java fix(agent): structure-aware truncation to stop mid-JSON cuts inducing hallucination (#187) 2026-05-21 15:13:07 +08:00
HikariPoolMonitor.java feat(db): support KingbaseES (人大金仓) domestic database (#324) 2026-06-14 10:30:09 +08:00
JacksonConfig.java Initial commit: MateClaw — Java + Vue 3 AI Assistant System 2026-04-04 19:03:49 +08:00
JwtAuthFilter.java feat(auth): personal access tokens for headless / CI integration 2026-05-02 15:41:34 +08:00
LoginRateLimitFilter.java fix(security): login rate limiting, SQL injection fix, error boundary 2026-04-11 18:31:51 +08:00
MybatisPlusConfig.java fix(orm): make updateTime auto-fill unconditional so rows actually move on update 2026-05-15 15:21:23 +08:00
OpenApiConfig.java feat(security): gate Swagger/OpenAPI UI behind mateclaw.openapi.expose-ui flag 2026-06-24 10:42:46 +08:00
SchedulingConfig.java feat(db): support KingbaseES (人大金仓) domestic database (#324) 2026-06-14 10:30:09 +08:00
SecurityConfig.java feat(security): gate Swagger/OpenAPI UI behind mateclaw.openapi.expose-ui flag 2026-06-24 10:42:46 +08:00
SecurityStartupValidator.java fix(security): harden JWT, CORS, and H2 Console for production 2026-04-11 18:21:17 +08:00
SpaForwardController.java fix(security): resolve SPA frontend route refresh returning 401 2026-04-05 18:20:40 +08:00
ToolTimeoutProperties.java feat(agent): smart truncation, stale stream cleanup, configurable tool timeouts, and new indexes 2026-04-07 06:39:46 +08:00
WebMvcConfig.java feat(skill,mcp): ckjia-shopping skill bundle + same-name dedup against bridged MCP/ACP virtual skills 2026-05-03 17:14:19 +08:00
WebSocketConfig.java refactor(bootstrap): drop legacy tools-sync.sql in favor of per-tool Flyway migrations 2026-04-27 14:00:08 +08:00
WorkspaceAccessInterceptor.java fix(workspace): verify a path-bound agent belongs to the request workspace 2026-05-19 20:07:02 +08:00