bug fixed

Reviewed-on: #16

Dockerfile.dev

@@ -0,0 +1,17 @@
+# --- Build stage ---
+FROM node:22 AS build
+ENV NODE_ENV=production
+ENV ORIGIN=https://tatort-dev.innovation-hub-niedersachsen.de
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . ./
+COPY config_dev.json ./config.json
+RUN npm run build
+
+# --- Production stage ---
+FROM node:22-alpine3.20
+COPY --from=build /app .
+ENV HOST=0.0.0.0
+EXPOSE 3000
+CMD ["sh", "-c", "ORIGIN=https://tatort-dev.innovation-hub-niedersachsen.de node build/index.js"]

Dockerfile.prod

@@ -6,6 +6,7 @@ WORKDIR /app
 COPY package*.json ./
 RUN npm ci
 COPY . ./
+COPY config_prod.json ./config.json
 RUN npm run build
 
 # --- Production stage ---
@@ -14,4 +15,3 @@ COPY --from=build /app .
 ENV HOST=0.0.0.0
 EXPOSE 3000
 CMD ["sh", "-c", "ORIGIN=https://tatort.innovation-hub-niedersachsen.de node build/index.js"]
-

Jenkinsfile

@@ -0,0 +1,103 @@
+/* groovylint-disable-next-line UnusedVariable */
+@Library('InnoHub-Library') _
+
+Boolean didRun = false
+
+pipeline {
+    agent any
+
+    tools {
+        nodejs 'NodeJS-24.2.0'
+    }
+
+    environment {
+        REGISTRY = 'https://gitea.innovation-hub-niedersachsen.de/'
+        USER = 'jenkins'
+        TOKEN = credentials('JenkinsGitea')
+    }
+
+    parameters {
+        string(name: 'REPO_NAME', defaultValue: '', description: 'Repo Name')
+        string(name: 'GIT_REF', defaultValue: '', description: 'Git Ref')
+    }
+
+    options {
+        buildDiscarder(
+           BuildHistoryManager([
+               [ continueAfterMatch: false, matchAtMost: 5 ],
+               [ actions: [ DeleteBuild() ] ]
+           ])
+       )
+    }
+
+    stages {
+        stage('Validate Repository') {
+            steps {
+                script {
+                    checkRepoName(params.REPO_NAME, true)
+                }
+            }
+        }
+
+        stage('Install Dependencies') {
+            steps {
+                script {
+                    didRun = true
+                }
+                sh 'npm ci'
+            }
+        }
+
+        stage('Test & Security Audit') {
+            steps {
+                script {
+                    didRun = true
+                }
+                echo 'Start checking security vulnerabilities in npm packages'
+                sh 'npm audit --audit-level=moderate'
+            }
+        }
+
+        stage('SonarQube Analysis') {
+            steps {
+                withSonarQubeEnv('sonarqube') {
+                    sh 'sonar-scanner -Dsonar.projectKey=tatort -Dsonar.sources=src'
+                }
+            }
+        }
+
+        stage('Push image to gitea registry') {
+            when {
+                branch 'development'
+            }
+            steps {
+                script {
+                    didRun = true
+                    def tag = "innohub/tatort-dev:0.${env.BUILD_ID}"
+                    docker.withRegistry('https://gitea.innovation-hub-niedersachsen.de', 'JenkinsGitea') {
+                        docker.build(tag, '-f Dockerfile.dev .').push('latest')
+                    }
+                }
+            }
+        }
+    }
+
+    post {
+        success {
+            script {
+                if (didRun) {
+                    echo 'Pipeline erfolgreich!'
+                    discordSend description: "Running ${env.BUILD_ID} on ${env.JENKINS_URL}, ${params.GIT_REF}", footer: 'Pipeline succeeded', link: env.BUILD_URL, result: currentBuild.currentResult, title: env.JOB_NAME, webhookURL: 'https://discordapp.com/api/webhooks/1389470542691831819/NdMO17sLBG2dplp_-oh6Ff0cbPOoADl0QwXKM9UzduxU44av_ZQkQjKTmpdK7YuwcZDc'
+                }
+            }
+        }
+        failure {
+            script {
+                if (didRun) {
+                    echo 'Pipeline fehlgeschlagen!'
+                    discordSend description: "Running ${env.BUILD_ID} on ${env.JENKINS_URL}, ${params.GIT_REF}", footer: 'Pipeline failed', link: env.BUILD_URL, result: currentBuild.currentResult, title: env.JOB_NAME, webhookURL: 'https://discordapp.com/api/webhooks/1389470542691831819/NdMO17sLBG2dplp_-oh6Ff0cbPOoADl0QwXKM9UzduxU44av_ZQkQjKTmpdK7YuwcZDc'
+                }
+            }
+        }
+    }
+}

config_dev.json

@@ -0,0 +1,17 @@
+{
+	"minio": {
+		"endPoint": "sws3.innovation-hub-niedersachsen.de",
+		"port": 443,
+		"useSSL": true,
+		"accessKey": "wjpKrmaqXra99rX3D61H",
+		"secretKey": "fTPi0u0FR6Lv9Y9IKydWv6WM0EA5XrsK008HCt9u"
+	},
+	"jwt": {
+		"secret": "@S2!q@@wXz$dCQ8JoVsHLpzaJ6JCfB",
+		"expiresIn": 3600
+	},
+	"auth": {
+		"admin": { "password": "A-InnoHUB_2025!", "admin": true },
+		"user": { "password": "U-InnoHUB_2025!", "admin": false }
+	}
+}

config_prod.json

@@ -8,10 +8,10 @@
 	},
 	"jwt": {
 		"secret": "@S2!q@@wXz$dCQ8JoVsHLpzaJ6JCfB",
-		"expiresIn": 36000
+		"expiresIn": 3600
 	},
 	"auth": {
 		"admin": { "password": "A-InnoHUB_2025!", "admin": true },
 		"user": { "password": "U-InnoHUB_2025!", "admin": false }
 	}
-}
+}

src/routes/(angemeldet)/+layout.server.ts

@@ -5,5 +5,6 @@ export const load: PageServerLoad = (event: ServerLoadEvent) => {
 	if (!event.locals.user && event.url.pathname !== '/anmeldung') throw redirect(303, '/anmeldung');
 	return {
 		user: event.locals.user
+		
 	};
 }

src/routes/(token-based)/list/[vorgang]/+page.svelte

@@ -143,29 +143,34 @@
 	}
 
 	async function handleDelete(tatort: string) {
-		let url = `/api/tatort/`;
+		// delete request
+		// --------------
 
-		console.log('Delete tatort: ', vorgang, tatort, data.caseId);
+		/* 	let url = new URL($page.url);
+												url.pathname += `/${filename}`;
+
+												try {
+													const response = await fetch(`/api${url.pathname}`, { method: 'DELETE' }); */
+
+		let url = new URL($page.url);
+		url.pathname += `/${tatort}`;
+		console.log('Delete tatort: ', `/api${url.pathname}`, url.pathname);
 
 		try {
-			const res = await fetch(url, {
+			const res = await fetch(`/api${url.pathname}`, {
 				method: 'DELETE',
 				headers: {
 					'Content-Type': 'application/json'
 				},
-				body: JSON.stringify({ vorgang })
+				body: JSON.stringify({ vorgang, tatort })
 			});
+			console.log('res delete', res);
 
 			if (!res.ok) {
 				const msg = await res.text();
 				console.error('❌ Fehler beim Löschen:', msg);
-			} else if (res.status == 204) {
-				setTimeout(() => {
-					window.location.reload();
-				}, 500);
-				// await invalidate(url);
 			} else {
-				console.log('🗑️ Erfolgreich gelöscht:', vorgang);
+				console.log('🗑️ Erfolgreich gelöscht:', url.pathname);
 			}
 		} catch (err) {
 			console.error('⚠️ Netzwerkfehler beim Löschen:', err);
@@ -173,7 +178,6 @@
 	}
 </script>
 
-<div>Hallo</div>
 <div class="-z-10 bg-white">
 	<div class="flex flex-col items-center justify-center w-full">
 		<h1 class="text-xl">Vorgang {vorgang}</h1>

src/routes/api/list/[vorgang]/+server.ts

@@ -4,13 +4,7 @@ import { json } from '@sveltejs/kit';
 
 
 
-/*
-export const GET: RequestHandler = async ({ params }) => {
-  const { filename } = params;
 
-  // TODO: Datei lesen oder Datenbankabfrage
-  return json({ filename, list: mockList });
-}; */
 
 // rename operation
 export async function PUT({ request }: {request: Request}) {

src/routes/api/list/[vorgang]/[tatort]/+server.ts

@@ -0,0 +1,36 @@
+import { BUCKET, client } from '$lib/minio';
+import type { RequestHandler } from '@sveltejs/kit';
+
+export async function GET() {
+	const stream = client.listObjectsV2(BUCKET, '', true);
+	const result = new ReadableStream({
+		start(controller) {
+			stream.on('data', (data) => {
+				controller.enqueue(`${JSON.stringify(data)}\n`);
+			});
+			stream.on('end', () => {
+				controller.close();
+			});
+		},
+		cancel() {
+			stream.destroy();
+		}
+	});
+
+	return new Response(result, {
+		headers: {
+			'content-type': 'text/event-stream'
+		}
+	});
+}
+
+export const DELETE: RequestHandler = async ({ request })=> { //body: {request}, keine params // params= de?param1=value&params2
+	 const url_fragments = request.url.split('/');
+	 const item = url_fragments.at(-1);
+	 const vorgang = url_fragments.at(-2);
+
+	 await client.removeObject(BUCKET, `${vorgang}/${item}`);
+	 return new Response(null, { status: 204 });
+
+}
+

src/routes/api/tatort/+server.ts

@@ -1,70 +0,0 @@
-import { BUCKET, client } from '$lib/minio';
-import type { RequestHandler } from '@sveltejs/kit';
-
-export async function GET() {
-	const stream = client.listObjectsV2(BUCKET, '', true);
-	const result = new ReadableStream({
-		start(controller) {
-			stream.on('data', (data) => {
-				controller.enqueue(`${JSON.stringify(data)}\n`);
-			});
-			stream.on('end', () => {
-				controller.close();
-			});
-		},
-		cancel() {
-			stream.destroy();
-		}
-	});
-
-	return new Response(result, {
-		headers: {
-			'content-type': 'text/event-stream'
-		}
-	});
-}
-
-
-/* export async function DELETE({ request }: { request: Request }) {
-	const url_fragments = request.url.split('/');
-	const item = url_fragments.at(-1);
-	const vorgang = url_fragments.at(-2);
-
-	await client.removeObject(BUCKET, `${vorgang}/${item}`);
-
-	return new Response(null, { status: 204 });
-} */
-
-export const DELETE: RequestHandler = async ({ request,params })=> { //body: {request}, keine params // params= de?param1=value&params2
-
-const token =  params;
-	let {vorgang, tatort} = await request.json();
-
-	console.log("Server Delete ", vorgang, tatort, token );
-		const url_fragments = request.url.split('/');
-	tatort = url_fragments.at(-1);
-	 vorgang = url_fragments.at(-2);
-
-	await client.removeObject(BUCKET, `${vorgang}/${tatort}?token=${token}`)
-	return new Response(null, { status: 204 });
- //	const vorgang = params.vorgang;
-/*
-	const object_list:string[] = await new Promise((resolve, reject) => {
-		const res: string[] = [];
-		const items_str = client.listObjects('tatort', vorgang, true);
-
-		items_str.on('data', (obj) => {
-	  if(obj.name) res.push(obj.name);
-		});
-
-		items_str.on('error', reject);
-
-		items_str.on('end', async () => {
-			resolve(res);
-		});
-	});
-
-	await client.removeObjects('tatort', object_list);
-
-	return new Response(null, { status: 204 }); */
- }