8 commits

Author	SHA1	Message	Date
Yisroel Baum	acdf703d80	scope text endpoints by ownership ... TextRepository gains findByUser; JsonTextRepository and the fake implement filtering by stored userId. TextController splits the list endpoint into getMyTexts (own) and getAllTexts (admin), and getText now requires the session user, returning 403 to non-owners while admins bypass.	2026-05-02 21:42:51 +03:00
Yisroel Baum	bac8323806	extract user from session in text controller ... prevent payload from spoofing ownership by reading the user from the request attribute set by auth middleware. respond 401 when unauthenticated.	2026-05-02 21:27:36 +03:00
Yisroel Baum	6009fb7ddd	refactor create text controller to catch BadRequestException	2026-04-19 23:38:23 +03:00
Yisroel Baum	38d06fce43	refactor getNodes into a new NodeController and update refs	2026-04-17 11:29:55 +03:00
Yisroel Baum	d4f5b22034	add method to get nodes of text id in text controller	2026-04-17 11:00:36 +03:00
Yisroel Baum	85ab8f2bbc	add getText method to text controller	2026-04-17 09:54:21 +03:00
Yisroel Baum	4fe10214d5	change fn to function -- style	2026-04-17 09:53:50 +03:00
Yisroel Baum	ec32ca0103	Add TextController for texts API	2026-04-15 20:46:56 +03:00