Datenbank bereinigt / Gitea-Integration gefixt

backend/database.js

@@ -368,6 +368,25 @@ function createTables() {
     )
   `);
 
+  // Refresh Tokens für sichere Token-Rotation
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS refresh_tokens (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      user_id INTEGER NOT NULL,
+      token TEXT NOT NULL UNIQUE,
+      expires_at DATETIME NOT NULL,
+      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+      last_used DATETIME,
+      user_agent TEXT,
+      ip_address TEXT,
+      FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+    )
+  `);
+
+  // Index für Token-Lookup
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_refresh_tokens_token ON refresh_tokens(token)`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_refresh_tokens_expires ON refresh_tokens(expires_at)`);
+
   // Anwendungen (Git-Repositories pro Projekt)
   db.exec(`
     CREATE TABLE IF NOT EXISTS applications (
@@ -457,6 +476,34 @@ function createTables() {
     )
   `);
 
+  // Coding-Verzeichnisse (projektübergreifend)
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS coding_directories (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      name TEXT NOT NULL,
+      local_path TEXT NOT NULL UNIQUE,
+      description TEXT,
+      color TEXT DEFAULT '#4F46E5',
+      gitea_repo_url TEXT,
+      gitea_repo_owner TEXT,
+      gitea_repo_name TEXT,
+      default_branch TEXT DEFAULT 'main',
+      last_sync DATETIME,
+      position INTEGER DEFAULT 0,
+      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+      created_by INTEGER,
+      FOREIGN KEY (created_by) REFERENCES users(id)
+    )
+  `);
+
+  // Migration: Add claude_instructions column to coding_directories
+  const codingDirColumns = db.prepare("PRAGMA table_info(coding_directories)").all();
+  const hasClaudeInstructions = codingDirColumns.some(col => col.name === 'claude_instructions');
+  if (!hasClaudeInstructions) {
+    db.exec('ALTER TABLE coding_directories ADD COLUMN claude_instructions TEXT');
+    logger.info('Migration: claude_instructions Spalte zu coding_directories hinzugefuegt');
+  }
+
   // Indizes für Performance
   db.exec(`
     CREATE INDEX IF NOT EXISTS idx_tasks_project ON tasks(project_id);
@@ -476,17 +523,36 @@ function createTables() {
     CREATE INDEX IF NOT EXISTS idx_applications_project ON applications(project_id);
     CREATE INDEX IF NOT EXISTS idx_knowledge_entries_category ON knowledge_entries(category_id);
     CREATE INDEX IF NOT EXISTS idx_knowledge_attachments_entry ON knowledge_attachments(entry_id);
+    CREATE INDEX IF NOT EXISTS idx_coding_directories_position ON coding_directories(position);
   `);
 
   logger.info('Datenbank-Tabellen erstellt');
 }
 
 /**
- * Standard-Benutzer erstellen
+ * Standard-Benutzer erstellen und Admin-Passwort korrigieren
  */
 async function createDefaultUsers() {
   const existingUsers = db.prepare('SELECT COUNT(*) as count FROM users').get();
 
+  // Admin-Passwort korrigieren (falls aus .env verschieden)
+  const adminExists = db.prepare('SELECT id, password_hash FROM users WHERE username = ? AND role = ?').get('admin', 'admin');
+  if (adminExists) {
+    const correctAdminPassword = process.env.ADMIN_PASSWORD || 'admin123';
+    const bcrypt = require('bcryptjs');
+    
+    // Prüfen ob das Passwort bereits korrekt ist
+    const isCorrect = await bcrypt.compare(correctAdminPassword, adminExists.password_hash);
+    if (!isCorrect) {
+      logger.info('Admin-Passwort wird aus .env aktualisiert');
+      const correctHash = await bcrypt.hash(correctAdminPassword, 12);
+      db.prepare('UPDATE users SET password_hash = ? WHERE id = ?').run(correctHash, adminExists.id);
+      logger.info('Admin-Passwort erfolgreich aktualisiert');
+    } else {
+      logger.info('Admin-Passwort bereits korrekt');
+    }
+  }
+
   if (existingUsers.count === 0) {
     // Benutzer aus Umgebungsvariablen
     const user1 = {
@@ -510,10 +576,10 @@ async function createDefaultUsers() {
 
     // Admin-Benutzer
     const adminUser = {
-      username: 'admin',
-      password: 'Kx9#mP2$vL7@nQ4!wR',
-      displayName: 'Administrator',
-      color: '#8B5CF6'
+      username: process.env.ADMIN_USERNAME || 'admin',
+      password: process.env.ADMIN_PASSWORD || 'admin123',
+      displayName: process.env.ADMIN_DISPLAYNAME || 'Administrator',
+      color: process.env.ADMIN_COLOR || '#8B5CF6'
     };
 
     // Passwoerter hashen und Benutzer erstellen