directlx-claude-config/projects/-source-hiveops-src-hiveops-mgmt/memory/MEMORY.md

HiveOps Management Portal - Memory

Admin Password Reset Feature

Successfully implemented admin password reset functionality for portal users.

Key Implementation Details

Backend Components:

• AuditLog.java: Added USER_PASSWORD_RESET, USER_ENABLED, USER_DISABLED enum values
• AuditService.java: Added logPasswordReset(), logUserEnabled(), logUserDisabled() methods
• UserRepository.java: Added search() method with JPQL query for email/name search
• ResetPasswordRequest.java: DTO with password validation (min 8, max 100 chars)
• UserService.java: Enhanced with findAll(), searchUsers(), resetPassword(), enableUser(), disableUser()
• PortalUserController.java: New controller at /portal/users with ADMIN role authorization
• SecurityConfig.java: Added authorization rule for /portal/users/** requiring ADMIN role

Frontend Components:

• list.html: User list with search, role filter, and pagination
• view.html: User details with action buttons (reset password, enable/disable)
• reset-password.html: Password reset form with validation
• base.html: Added Users menu item in sidebar (ADMIN only)

Security Patterns

• BCrypt password encoding (strength 12)
• @PreAuthorize("hasRole('ADMIN')") on controller
• Prevents admin from disabling own account
• All actions logged to audit_logs table with admin email, target user email, and IP address

Common Patterns in Portal

• Flash messages via RedirectAttributes (success/error)
• getClientIp() helper extracts IP from X-Forwarded-For or remote address
• Pagination with PageRequest.of(page, size, Sort)
• Bootstrap 5 styling with badges for status/role
• Thymeleaf validation with .invalid-feedback for errors

Testing Checklist

1. Login as admin@directlx.dev / admin123
2. Navigate to Users menu (visible to ADMIN only)
3. Search users by email/name
4. View user details
5. Reset password (validate min 8 chars, matching confirmation)
6. Enable/disable user (cannot disable self)
7. Verify audit log entries created
8. Test login with new password