DevEnv nis2-agileandClaude Sonnet 4.6 6933e1d3fb [INTEG] Provisioning B2B automatico + fix JWT helpers ...

- POST /api/services/provision: onboarding automatico tenant da lg231
  - X-Provision-Secret auth (master secret, non org-specific)
  - Crea org (con tutti i dati lg231: P.IVA, ATECO, sede, PEC, fatturato)
  - Crea admin user con password temporanea (must_change_password=1)
  - Genera API Key scope [read:all, write:all, admin:org, sso:login]
  - Emette JWT 2h per apertura immediata UI
  - Callback webhook a lg231 con api_key
  - Idempotent: stessa P.IVA → restituisce org esistente
  - Audit: org.provisioned severity=critical
- config.php: PROVISION_SECRET (env var)
- BaseController: base64UrlEncode/Decode da private → protected
- Migration 011: colonne provisioning + must_change_password + indexes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-07 15:02:11 +01:00

..

admin

[DEPLOY] Migrazione a subdomain nis2.certisource.it

2026-02-19 14:05:18 +01:00

css

[POLISH] Docker setup fix + UI polish + project completion

2026-02-17 19:48:11 +01:00

docs

[MIGRATE] Migrazione a nis2.agile.software

2026-03-07 14:07:10 +01:00

integrations

[MIGRATE] Migrazione a nis2.agile.software

2026-03-07 14:07:10 +01:00

js

[INTEG] Pagina integrazioni esterne + spec lg231↔NIS2

2026-03-07 14:43:59 +01:00

.htaccess

[FIX] Deploy fixes - Auth header passthrough, dashboard query, landing page

2026-02-17 18:08:43 +01:00

api-status.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

architecture.html

[FEAT] i18n IT/EN, Help Online contestuale, pagina Architettura

2026-02-18 08:34:37 +01:00

assessment.html

[SEC+UX] Hardening sicurezza + miglioramenti UX pre-audit

2026-02-20 12:01:33 +01:00

assets.html

[FIX] i18n funzionante + bug audit.html + help system

2026-02-20 11:17:04 +01:00

companies.html

[FEAT] Ruolo Consulente + Wizard Registrazione v2

2026-02-20 08:53:30 +01:00

dashboard.html

[SEC+UX] Hardening sicurezza + miglioramenti UX pre-audit

2026-02-20 12:01:33 +01:00

incidents.html

[UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish

2026-02-20 12:25:52 +01:00

index.html

[DEPLOY] Migrazione a subdomain nis2.certisource.it

2026-02-19 14:05:18 +01:00

index.php

[INTEG] Provisioning B2B automatico + fix JWT helpers

2026-03-07 15:02:11 +01:00

integrazioniext.html

[INTEG] Aggiorna integrazioniext.html con token exchange, SSO e audit

2026-03-07 14:47:10 +01:00

login.html

[FEAT] Ruolo Consulente + Wizard Registrazione v2

2026-02-20 08:53:30 +01:00

normative.html

[FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni

2026-03-07 13:20:24 +01:00

onboarding.html

[FEAT] Ruolo Consulente + Wizard Registrazione v2

2026-02-20 08:53:30 +01:00

policies.html

[UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish

2026-02-20 12:25:52 +01:00

register.html

[FEAT] Ruolo Consulente + Wizard Registrazione v2

2026-02-20 08:53:30 +01:00

reports.html

[FIX] i18n funzionante + bug audit.html + help system

2026-02-20 11:17:04 +01:00

risks.html

[UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish

2026-02-20 12:25:52 +01:00

settings.html

[FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni

2026-03-07 13:20:24 +01:00

setup-org.html

[FIX] Fix annual_turnover field name in setup-org.html

2026-02-17 19:49:57 +01:00

simulate.html

[FEAT] Simulazioni Demo + Audit Trail Certificato SHA-256

2026-03-07 13:56:53 +01:00

supply-chain.html

[FIX] i18n funzionante + bug audit.html + help system

2026-02-20 11:17:04 +01:00

test-runner.php

[TEST] Bottone ⚡ Reset+Simula+Testa Tutto + preserva admin Benassati

2026-03-07 14:35:20 +01:00

training.html

[FIX] i18n funzionante + bug audit.html + help system

2026-02-20 11:17:04 +01:00

whistleblowing.html

[FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni

2026-03-07 13:20:24 +01:00