Skip to content

Configuration options for Rizoma#634

Draft
Theophile-Madet wants to merge 92 commits intomasterfrom
rizoma
Draft

Configuration options for Rizoma#634
Theophile-Madet wants to merge 92 commits intomasterfrom
rizoma

Conversation

@Theophile-Madet
Copy link
Copy Markdown
Collaborator

No description provided.

@Theophile-Madet Theophile-Madet self-assigned this Jun 11, 2025
token_data = jwt.decode(
access_token,
algorithms=["HS256"],
options={"verify_signature": False},

Check failure

Code scanning / SonarCloud

JWT should be signed and verified High

Don't use a JWT token without verifying its signature. See more on SonarQube Cloud
DATABASES = {
"default": env.db(default="postgresql://tapir:tapir@db:5432/tapir"),
"default": env.db(
default=f"postgresql://tapir:tapir@{DB_DOCKER_SERVICE_NAME}:5432/tapir"

Check failure

Code scanning / SonarCloud

PostgreSQL database passwords should not be disclosed High

Make sure this PostgreSQL database password gets changed and removed from the code. See more on SonarQube Cloud
token_data = jwt.decode(
access_token,
algorithms=["HS256"],
options={"verify_signature": False},

Check failure

Code scanning / SonarCloud

JWT should be signed and verified High

Don't use a JWT token without verifying its signature. See more on SonarQube Cloud
Theophile-Madet and others added 30 commits September 29, 2025 14:13
* feat: allow loading rizoma static files (css / js)

* Restore sidebar changes

* feat: Login page

* feat: Update sidebar design + add admin Shift link

* feat: improve Navbar + sidebar

* feat: Update sidebar style

* feat: Remove unrelevant informations and buttons from Rizoma's user dashboard
… are now in hours instead of days and can be overriden with env vars.
- The event name includes the slot name
- The description includes a link to the shift
- The location now included
* fix: check if members actually belong to a given group before creating them during a sync, or once a day for existing members.

* Members that belong to the Consumidores group but are inactive are not deleted anymore but instead paused.

* Apply suggestion from @gnunicorn

Co-authored-by: Benjamin Kampmann <ben.kampmann@gmail.com>

---------

Co-authored-by: Benjamin Kampmann <ben.kampmann@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants