@johnnyboy11234/esg-idea-contest 0.3.1 → 0.3.2

package/backend/api/openapi.yaml

@@ -246,6 +246,42 @@ paths:
         '401': { $ref: '#/components/responses/Problem' }
         '404': { $ref: '#/components/responses/Problem' }
         '500': { $ref: '#/components/responses/Problem' }
+  /ideas/{id}/slides:
+    get:
+      operationId: downloadSlides
+      tags: [ideas]
+      summary: Download the Idea's slides (Leader, Member, Admin)
+      description: >
+        The SLIDES_DOWNLOAD audit row is committed before the first byte is sent (PRD 6.11). The file
+        is named by the current expected filename (PRD 6.6). Range is not supported; HEAD answers 405
+        (no audit row). The Accept header is not checked on this route. MinIO unavailable before the
+        first byte answers 503 STORAGE_UNAVAILABLE; a storage failure after the headers are sent aborts
+        the connection (the body is shorter than Content-Length). A transaction whose outcome is
+        unknown answers 503 SERVICE_UNAVAILABLE and serves nothing.
+      parameters:
+        - $ref: '#/components/parameters/IdeaId'
+      responses:
+        '200':
+          description: The stored file
+          headers:
+            Content-Disposition:
+              description: 'attachment; filename="<ASCII fallback>"; filename*=UTF-8''''<percent-encoded> (RFC 6266)'
+              schema: { type: string }
+            Content-Length:
+              schema: { type: integer }
+            Cache-Control:
+              schema: { type: string, enum: [no-store] }
+            X-Content-Type-Options:
+              schema: { type: string, enum: [nosniff] }
+          content:
+            application/pdf:
+              schema: { type: string, format: binary }
+            application/vnd.openxmlformats-officedocument.presentationml.presentation:
+              schema: { type: string, format: binary }
+        '401': { $ref: '#/components/responses/Problem' }
+        '404': { $ref: '#/components/responses/Problem' }
+        '500': { $ref: '#/components/responses/Problem' }
+        '503': { $ref: '#/components/responses/Problem' }
 components:
   securitySchemes:
     sessionCookie:

package/backend/cmd/server/main.go

@@ -87,6 +87,7 @@ func run() error {
 			},
 			ExpectedFilename: storage.ExpectedFilenameBase,
 			Fail:             errs.Write,
+			Log:              log,
 		},
 	}
 

package/backend/internal/account/internal/passwords/NOTICE

@@ -0,0 +1,36 @@
+common-passwords.txt
+====================
+
+Source:  SecLists, Passwords/Common-Credentials/10k-most-common.txt
+         https://github.com/danielmiessler/SecLists
+Commit:  a1a06ab57c3f4efc450d80738a72c11597aac81a
+SHA-256: 68782d6a4a19a4768d5f15dd66bd534e7a33055cc755411e33f16d18c50fdcce
+Entries: 10,001 lines, printable ASCII, no case-folded duplicates
+Changes: none (byte-for-byte copy)
+
+Used by: backend rule COMMON_PASSWORD (PRD §6.4, embedded with go:embed) and
+the frontend live password checklist (lazy-loaded chunk).
+
+Licence of the source file:
+
+MIT License
+
+Copyright (c) 2018 Daniel Miessler
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.