Commit graph

2 commits

Author SHA1 Message Date
npal
d01f847a4d fix(security): restore authorization on asset and contact endpoints
AssetController and ContactController had [Authorize] commented out with
"Removed for testing", leaving every asset and contact endpoint reachable
without a token. Restore the attribute. Also drop AssetController's unused
UserManager dependency.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-05 20:14:49 -05:00
npal
9533c6683b docs: track backend architecture-refactor findings
Starting point for the ARCHITECTURE_AND_CODE_QUALITY.md cleanup pass: a
verified (not grep-only) list of layering violations, validation coverage
gaps against the existing FluentValidation pattern, and N+1/query-shape
issues found so far, plus what was checked and ruled out.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-01 19:07:03 -05:00