Search results

[P2] Replace placeholder legal document endpoints with approved versioned content

area:docsLegal or operational documentationLegal or operational documentation

area:securitySecurity, privacy, auth, or secretsSecurity, privacy, auth, or secrets

priority:P2Medium: important hardening or operational maturity workMedium: important hardening or operational maturity work

production-readinessProduction readiness audit itemProduction readiness audit item

type:opsOperational readiness taskOperational readiness task

Status: Open.

#289 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P2] Add production observability, readiness checks, and operational data retention

area:deploymentBuild, config, deployment, infrastructureBuild, config, deployment, infrastructure

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P2Medium: important hardening or operational maturity workMedium: important hardening or operational maturity work

production-readinessProduction readiness audit itemProduction readiness audit item

type:opsOperational readiness taskOperational readiness task

Status: Open.

#288 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Make Firebase initialization secret-safe and fail fast in production

area:deploymentBuild, config, deployment, infrastructureBuild, config, deployment, infrastructure

area:notificationsPush notifications and schedulingPush notifications and scheduling

area:securitySecurity, privacy, auth, or secretsSecurity, privacy, auth, or secrets

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#287 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Add database constraints and indexes for core data integrity

area:dataDatabase schema, migrations, and data integrityDatabase schema, migrations, and data integrity

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#286 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Standardize exception handling and HTTP error semantics

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#285 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Add rate limiting and brute-force protection for auth-sensitive endpoints

area:authAuthentication and authorizationAuthentication and authorization

area:securitySecurity, privacy, auth, or secretsSecurity, privacy, auth, or secrets

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#284 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Replace manual OAuth login JSON response construction with typed DTO serialization

area:authAuthentication and authorizationAuthentication and authorization

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:bugIncorrect behavior or vulnerabilityIncorrect behavior or vulnerability

Status: Open.

#283 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Add timeouts, retries, and failure handling for outbound OAuth provider calls

area:authAuthentication and authorizationAuthentication and authorization

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#282 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Make notification scheduling and Firebase delivery reliable and observable

area:notificationsPush notifications and schedulingPush notifications and scheduling

area:stabilityReliability and runtime stabilityReliability and runtime stability

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#281 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Add CI quality gates for build, tests, and dependency/security checks

area:deploymentBuild, config, deployment, infrastructureBuild, config, deployment, infrastructure

area:testingTests and CI quality gatesTests and CI quality gates

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:opsOperational readiness taskOperational readiness task

Status: Open.

#279 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P1] Add isolated test profile and make the test suite pass from a clean clone

area:stabilityReliability and runtime stabilityReliability and runtime stability

area:testingTests and CI quality gatesTests and CI quality gates

priority:P1High: should be resolved before production launchHigh: should be resolved before production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:opsOperational readiness taskOperational readiness task

Status: Open.

#278 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026

[P0] Lock down CORS, Swagger, H2 console, and security headers for production

area:deploymentBuild, config, deployment, infrastructureBuild, config, deployment, infrastructure

area:securitySecurity, privacy, auth, or secretsSecurity, privacy, auth, or secrets

priority:P0Critical: blocks safe production launchCritical: blocks safe production launch

production-readinessProduction readiness audit itemProduction readiness audit item

type:hardeningSecurity/stability hardening taskSecurity/stability hardening task

Status: Open.

#275 In DevKor-github/OnTime-back;

· jjoonleo opened on May 7, 2026