You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fineract.apache.org by am...@apache.org on 2026/08/12 05:38:38 UTC
(fineract-loan-origination) 01/01: Merge pull request #66 from KRYSTALM7/feature/FINERACT-2442-security-hardening
This is an automated email from the ASF dual-hosted git repository.
Aman-Mittal pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/fineract-loan-origination.git
commit 1bcaf924da2afdf52bbefbae11afad2bfa93607f
Merge: 13eb05b 1e82c3e
Author: Aman-Mittal <32...@users.noreply.github.com>
AuthorDate: Wed Aug 12 11:08:30 2026 +0530
Merge pull request #66 from KRYSTALM7/feature/FINERACT-2442-security-hardening
FINERACT-2442: Close auth vulnerabilities, harden secrets config, wire frontend CI
.github/workflows/ci.yml | 40 +-
frontend/src/app/app.routes.ts | 25 +-
frontend/src/app/core/guards/staff-auth.guard.ts | 2 +-
.../src/app/core/interceptors/auth.interceptor.ts | 2 +-
.../src/app/core/models/staff-application.model.ts | 7 +-
frontend/src/app/core/services/auth.service.ts | 36 +-
.../services/customer-loan-application.service.ts | 28 +-
.../app/core/services/loan-application.service.ts | 26 +-
.../src/app/core/services/staff-auth.service.ts | 46 +-
.../services/staff-loan-application.service.ts | 18 +-
.../loan-application-detail.component.ts | 14 +-
.../loan-application-list.component.scss | 2 +-
.../app/features/my-loans/my-loans.component.html | 4 +-
.../staff-application-detail.component.ts | 847 ++++++++++++++-------
.../staff-application-list.component.ts | 339 ++++++---
.../staff/dashboard/staff-dashboard.component.ts | 433 +++++++----
.../features/staff/login/staff-login.component.ts | 259 ++++---
.../layout/staff-layout/staff-layout.component.ts | 619 ++++++++-------
frontend/src/app/shared/styles/_status-colors.scss | 2 +-
.../fineract/los/api/AdminCustomerController.java | 2 +
.../fineract/los/api/ApprovalController.java | 4 +-
.../fineract/los/api/DisbursementController.java | 2 +
.../los/api/LoanApplicationController.java | 2 +
.../fineract/los/bridge/MockFineractAdapter.java | 2 +-
.../org/apache/fineract/los/config/CorsConfig.java | 52 ++
.../apache/fineract/los/config/SecurityConfig.java | 23 +-
.../fineract/los/security/JwtProperties.java | 20 +
.../fineract/los/security/JwtSecretValidator.java | 58 ++
.../los/security/MockCustomerIdentityService.java | 2 +
src/main/resources/application.yml | 4 +-
.../los/cucumber/CucumberSpringConfig.java | 2 +
31 files changed, 1862 insertions(+), 1060 deletions(-)