Changed "bearer_auth" to "Bearer" in utoipa security annotations
for QR and Hackathon handlers to match the registered SecurityAddon
scheme name. Fixes Swagger UI not sending Authorization header.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The hackathon_auth_middleware requires Arc<PgPool> from Extension,
but was applied as the outermost layer (running before Extension(pool)
was injected). Swapped layer order so pool Extension is outermost,
making it available when the auth middleware runs.
Fixes 500 errors on all /v1/hackathon/* authenticated endpoints.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Each endpoint now shows a realistic JSON example (data wrapper + version)
so developers can see the exact response shape without calling the API.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
All hackathon endpoints (/v1/hackathon/*) and QR endpoints (/v1/qr/*)
are now visible in the Swagger UI at /docs.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Axum 0.8+ requires {param} capture group syntax.
:param style was causing runtime panic on startup.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Enforce axum best practices across all 13 workspace crates
(max 200 LOC/file, no comments, no unwrap, clean architecture)
- Fix domain→infrastructure dependency inversions in imphnen-iam and imphnen-dimentorin
- Extract imphnen-storage (MinIO) and imphnen-email (Lettre) as standalone crates
- Centralize all config in ENV struct: CDN_URL, CORS_ALLOWED_ORIGINS
- Centralize SMTP through imphnen-email; remove dead HackathonConfig
- Centralize database: QR crate now shares main DB pool (single DATABASE_URL)
- Rename QR users table to qr_users to avoid collision with main users table
- Merge imphnen-qr into imphnen-cms/src/qr (13 crates, down from 14)
- Restructure imphnen-hackathon flat modules into clean architecture
- Remove all stale env vars from .env.example (SurrealDB, QR_JWT, Hackathon infra)
- Fix Dockerfile to include all current workspace crates
- Bump all crate versions 0.2.0 → 0.3.0
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
All modules now use the main IAM JWT (ACCESS_TOKEN_SECRET) for authentication,
removing three separate auth systems (hackathon Supabase, hackathon JWT, QR JWT).
Changes:
- hackathon: replace HackathonJwtService with decode_access_token() from imphnen-libs
- remove entire src/auth/ (Supabase signup/login/GitHub/forgot-reset)
- remove common/hackathon_jwt.rs, common/supabase_client.rs
- remove Supabase from HackathonConfig (JWT, GitHub OAuth, Supabase anon/service keys)
- replace Supabase Storage with MinioService from imphnen-libs
- all route jwt params removed; hackathon_router takes MinioService instead
- qr: replace QrJwtService with decode_access_token() from imphnen-libs
- remove entire src/auth/ (register/login/Google OAuth/refresh)
- remove common/qr_jwt.rs, src/config.rs
- qr_auth_middleware now lazy-upserts users into QR DB on first access
- qr_router(pool) — no config needed
- gateway: create MinioService once and pass to hackathon_router; qr_router simplified
Users now register/login via /v1/auth/* and use the same JWT for all endpoints.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Consolidates the standalone hackathon backend (16 crates) into a single
imphnen-hackathon crate following the existing clean architecture patterns.
All endpoints are exposed under /v1/hackathon/ via the gateway.
Features migrated:
- Auth: Supabase-based signup/login/GitHub OAuth/password reset (own JWT)
- Users: profile management with team listing
- Teams: CRUD with city validation, deadline enforcement, invite system
- Invitations: team member invitations with accept/reject flow
- Join Requests: team join request workflow
- Chat: team messaging with author/leader delete permissions
- Submissions: project submission lifecycle (draft→pending→submitted)
- Storage: Supabase Storage file upload endpoints
- Certificates: public user certificate data endpoint
- Winners: public winners listing
- Admin: admin-only CRUD for all entities
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
