mirror of
http://172.20.10.11:3000/gitadmin/INSIGHT-MVP.git
synced 2026-06-25 00:16:41 +02:00
docs: Stand.md aktualisiert — vollständiger Feature-Überblick Stand 2026-03-15
Alle implementierten Features dokumentiert: Auth, M365 Integration, Dashboard, CRM Phase 1-2.5 inkl. Kanban + Berechtigungsmodell, Expertenprofil, Profilzugriff, Admin-Bereich, Login-Branding, API-Endpunkte. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Thomas Reitz
parent
3adca2de65
commit
0a5a37d169
1 changed files with 170 additions and 0 deletions
170
docs/Stand.md
170
docs/Stand.md
|
|
@ -0,0 +1,170 @@
|
|||
# INSIGHT MVP — Aktueller Implementierungsstand
|
||||
*Stand: 2026-03-15*
|
||||
|
||||
---
|
||||
|
||||
## Alle Services live und gesund
|
||||
|
||||
| Service | Container | Status |
|
||||
|---------|-----------|--------|
|
||||
| Core Service | `insight-core` | ✅ healthy |
|
||||
| CRM Service | `insight-crm` | ✅ healthy |
|
||||
| Frontend | `insight-frontend` | ✅ healthy |
|
||||
| PostgreSQL | `insight-postgres` | ✅ healthy |
|
||||
| PgBouncer | `insight-pgbouncer` | ✅ healthy |
|
||||
| Redis | `insight-redis` | ✅ healthy |
|
||||
| Traefik | `insight-traefik` | ✅ healthy |
|
||||
| step-ca | `insight-step-ca` | ✅ healthy |
|
||||
|
||||
---
|
||||
|
||||
## Implementierte Features (vollständig deployed)
|
||||
|
||||
### Auth & Benutzer
|
||||
- ✅ Login (lokal + SSO via Microsoft Entra ID)
|
||||
- ✅ JWT (RS256, Access in Memory, Refresh HttpOnly Cookie)
|
||||
- ✅ 2FA (TOTP)
|
||||
- ✅ Silent Refresh
|
||||
- ✅ Passwort ändern
|
||||
- ✅ Profilbild-Upload
|
||||
|
||||
### Microsoft 365 Integration
|
||||
- ✅ OAuth2-Flow (`/auth/integrations/microsoft-365`)
|
||||
- ✅ Token-Storage verschlüsselt (AES-256-GCM) in `user_integrations`
|
||||
- ✅ Token-Refresh automatisch
|
||||
- ✅ Scopes: Mail.Read, Calendars.Read, Tasks.ReadWrite, offline_access
|
||||
- ✅ O365-Profilfelder: jobTitle, department, companyName, officeLocation
|
||||
- ✅ Profilbild-Sync aus O365 (96x96, nur wenn kein INSIGHT-Avatar)
|
||||
- ✅ Auto-Sync beim Login (`useO365ProfileSync` Hook)
|
||||
|
||||
### Dashboard
|
||||
- ✅ Home-Tab: Analoguhr, 3-Tage-Wetter-Prognose, Spruch des Tages, kompakte Widgets
|
||||
- ✅ E-Mail-Tab (O365 Inbox mit Lesefenster)
|
||||
- ✅ Kalender-Tab (O365 Events)
|
||||
- ✅ Aufgaben-Tab (O365 + CRM bidirektional)
|
||||
- ✅ Kontakte-Tab (O365 + CRM verknüpft)
|
||||
|
||||
### CRM (Phase 1–2.5)
|
||||
- ✅ Companies, Contacts, Deals, Activities (vollständiges CRUD)
|
||||
- ✅ Pipelines & Stages
|
||||
- ✅ Custom Fields
|
||||
- ✅ Kanban-Board (`/crm/kanban`) mit Drag & Drop (@dnd-kit)
|
||||
- ✅ Forecast-Ansicht
|
||||
- ✅ Lexware Office Integration (Kontakte, Belege)
|
||||
- ✅ North Data Enrichment
|
||||
- ✅ **CRM Berechtigungsmodell (Phase 2.5)**:
|
||||
- Sichtbarkeitsfilter OWN/TEAM/ALL pro Entity (COMPANY, CONTACT, DEAL, ACTIVITY)
|
||||
- JWT enthält `tenantRole` + `department`
|
||||
- ReadonlyGuard für READONLY-Rolle
|
||||
- Admin-Einstellungsseite `/admin/crm-settings`
|
||||
- Redis-Cache für Visibility-Settings (5 Min TTL)
|
||||
|
||||
### Expertenprofil
|
||||
- ✅ Skills, Erfahrungen, Projekte, Zertifizierungen, Sprachen, Anhänge
|
||||
- ✅ 3-Spalten-Layout
|
||||
- ✅ PDF-Export (Timeline, Logo, Akzentfarbe aus Branding)
|
||||
- ✅ Word-Export (DOCX)
|
||||
|
||||
### Profilzugriff (Admin)
|
||||
- ✅ `ProfileAccessGroup` + `ProfileAccessGroupMember` Modelle
|
||||
- ✅ Benutzergruppen mit canView/canExport/canEdit Berechtigungen
|
||||
- ✅ Admin-UI `/admin/profile-access`:
|
||||
- Tab "Gruppen": CRUD + Mitglieder verwalten
|
||||
- Tab "Profile": alle User mit Aktionen (Ansehen, PDF, DOCX, Bearbeiten)
|
||||
- ✅ Admin-Detailseite `/admin/profiles/:userId` (Profil im Admin-Kontext bearbeiten)
|
||||
- ✅ Admin-Endpoints für alle Profil-Mutationen (`/expert-profile/admin/users/...`)
|
||||
|
||||
### Admin-Bereich
|
||||
- ✅ Benutzerverwaltung (`/admin/users`)
|
||||
- ✅ SSO-Konfiguration (`/admin/sso`)
|
||||
- ✅ Externe Links (`/admin/external-links`)
|
||||
- ✅ **Anpassungen (`/admin/customize`)**:
|
||||
- Sidebar-Breite, Logo, Farben
|
||||
- Login-Hintergrund (Farbverlauf / Einfarbig / Hintergrundbild)
|
||||
- ✅ Firmendaten (`/admin/company`)
|
||||
- ✅ Events (`/admin/events`)
|
||||
- ✅ SSL/Domain (`/admin/ssl`)
|
||||
- ✅ Profilzugriff (`/admin/profile-access`)
|
||||
- ✅ CRM Sichtbarkeit (`/admin/crm-settings`)
|
||||
|
||||
### Login-Screen-Branding
|
||||
- ✅ Dynamischer Hintergrund aus Branding-Einstellungen
|
||||
- ✅ Logo auf Login-Seite (statt "INSIGHT"-Text)
|
||||
- ✅ Typen: Farbverlauf, Einfarbig, Hintergrundbild (max 2MB)
|
||||
|
||||
---
|
||||
|
||||
## Technische Infrastruktur
|
||||
|
||||
| Komponente | Version/Details |
|
||||
|------------|-----------------|
|
||||
| Backend | NestJS 10, TypeScript strict |
|
||||
| Frontend | React 18, Vite |
|
||||
| Datenbank | PostgreSQL 16, Prisma ORM |
|
||||
| Cache | Redis 7 (Pub/Sub + Cache) |
|
||||
| Connection Pool | PgBouncer |
|
||||
| API Gateway | Traefik 3 |
|
||||
| Auth | RS256 JWT, bcrypt Cost 12 |
|
||||
| mTLS | step-ca (Smallstep) |
|
||||
| Container | Docker Compose |
|
||||
|
||||
### Prisma-Schemas
|
||||
- `core.schema.prisma` — User, Auth, Profile, Tenant, Integrations, ProfileAccess
|
||||
- `crm.schema.prisma` — CRM-Entities, Pipelines, CustomFields, Contracts, Visibility
|
||||
|
||||
### Branching
|
||||
- Aktiver Branch: `feature/crm-service`
|
||||
- 200 Commits seit Initial
|
||||
|
||||
---
|
||||
|
||||
## API-Endpunkte (Core Service)
|
||||
|
||||
```
|
||||
POST /api/v1/auth/login
|
||||
POST /api/v1/auth/refresh
|
||||
POST /api/v1/auth/logout
|
||||
GET /api/v1/auth/integrations/microsoft-365 ← OAuth-Flow
|
||||
GET /api/v1/auth/integrations/microsoft-365/callback
|
||||
|
||||
GET /api/v1/users/me
|
||||
PATCH /api/v1/users/me
|
||||
GET /api/v1/users/team-members
|
||||
GET /api/v1/users/me/integrations
|
||||
DELETE /api/v1/users/me/integrations/microsoft-365
|
||||
|
||||
GET /api/v1/expert-profile/me
|
||||
PATCH /api/v1/expert-profile/me/skills
|
||||
POST /api/v1/expert-profile/me/experiences
|
||||
... (Projekte, Zertifizierungen, Sprachen, Anhänge)
|
||||
GET /api/v1/expert-profile/me/export/pdf
|
||||
GET /api/v1/expert-profile/me/export/docx
|
||||
GET /api/v1/expert-profile/admin/users
|
||||
GET /api/v1/expert-profile/admin/users/:userId
|
||||
GET /api/v1/expert-profile/admin/users/:userId/export/pdf
|
||||
... (alle Profil-Mutationen für Admin)
|
||||
|
||||
GET /api/v1/profile-access/groups
|
||||
POST /api/v1/profile-access/groups
|
||||
PATCH /api/v1/profile-access/groups/:id
|
||||
DELETE /api/v1/profile-access/groups/:id
|
||||
GET/POST/DELETE /api/v1/profile-access/groups/:id/members/:userId
|
||||
|
||||
GET /api/v1/settings/branding
|
||||
POST /api/v1/settings/branding
|
||||
GET /api/v1/settings/company
|
||||
POST /api/v1/settings/company
|
||||
```
|
||||
|
||||
## API-Endpunkte (CRM Service)
|
||||
|
||||
```
|
||||
Companies, Contacts, Deals, Activities, Pipelines, ... (vollständiges CRUD)
|
||||
GET /api/v1/crm/visibility-settings
|
||||
PUT /api/v1/crm/visibility-settings/:entity
|
||||
GET /api/v1/crm/office365/emails
|
||||
GET /api/v1/crm/office365/calendar
|
||||
GET /api/v1/crm/office365/tasks
|
||||
POST /api/v1/crm/office365/tasks
|
||||
GET /api/v1/crm/office365/profile
|
||||
```
|
||||
Loading…
Add table
Reference in a new issue