nis2-agile/public
DevEnv nis2-agile 6933e1d3fb [INTEG] Provisioning B2B automatico + fix JWT helpers
- POST /api/services/provision: onboarding automatico tenant da lg231
  - X-Provision-Secret auth (master secret, non org-specific)
  - Crea org (con tutti i dati lg231: P.IVA, ATECO, sede, PEC, fatturato)
  - Crea admin user con password temporanea (must_change_password=1)
  - Genera API Key scope [read:all, write:all, admin:org, sso:login]
  - Emette JWT 2h per apertura immediata UI
  - Callback webhook a lg231 con api_key
  - Idempotent: stessa P.IVA → restituisce org esistente
  - Audit: org.provisioned severity=critical
- config.php: PROVISION_SECRET (env var)
- BaseController: base64UrlEncode/Decode da private → protected
- Migration 011: colonne provisioning + must_change_password + indexes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-07 15:02:11 +01:00
..
admin [DEPLOY] Migrazione a subdomain nis2.certisource.it 2026-02-19 14:05:18 +01:00
css [POLISH] Docker setup fix + UI polish + project completion 2026-02-17 19:48:11 +01:00
docs [MIGRATE] Migrazione a nis2.agile.software 2026-03-07 14:07:10 +01:00
integrations [MIGRATE] Migrazione a nis2.agile.software 2026-03-07 14:07:10 +01:00
js [INTEG] Pagina integrazioni esterne + spec lg231↔NIS2 2026-03-07 14:43:59 +01:00
.htaccess [FIX] Deploy fixes - Auth header passthrough, dashboard query, landing page 2026-02-17 18:08:43 +01:00
api-status.php [CORE] Initial project scaffold - NIS2 Agile Compliance Platform 2026-02-17 17:50:18 +01:00
architecture.html [FEAT] i18n IT/EN, Help Online contestuale, pagina Architettura 2026-02-18 08:34:37 +01:00
assessment.html [SEC+UX] Hardening sicurezza + miglioramenti UX pre-audit 2026-02-20 12:01:33 +01:00
assets.html [FIX] i18n funzionante + bug audit.html + help system 2026-02-20 11:17:04 +01:00
companies.html [FEAT] Ruolo Consulente + Wizard Registrazione v2 2026-02-20 08:53:30 +01:00
dashboard.html [SEC+UX] Hardening sicurezza + miglioramenti UX pre-audit 2026-02-20 12:01:33 +01:00
incidents.html [UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish 2026-02-20 12:25:52 +01:00
index.html [DEPLOY] Migrazione a subdomain nis2.certisource.it 2026-02-19 14:05:18 +01:00
index.php [INTEG] Provisioning B2B automatico + fix JWT helpers 2026-03-07 15:02:11 +01:00
integrazioniext.html [INTEG] Aggiorna integrazioniext.html con token exchange, SSO e audit 2026-03-07 14:47:10 +01:00
login.html [FEAT] Ruolo Consulente + Wizard Registrazione v2 2026-02-20 08:53:30 +01:00
normative.html [FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni 2026-03-07 13:20:24 +01:00
onboarding.html [FEAT] Ruolo Consulente + Wizard Registrazione v2 2026-02-20 08:53:30 +01:00
policies.html [UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish 2026-02-20 12:25:52 +01:00
register.html [FEAT] Ruolo Consulente + Wizard Registrazione v2 2026-02-20 08:53:30 +01:00
reports.html [FIX] i18n funzionante + bug audit.html + help system 2026-02-20 11:17:04 +01:00
risks.html [UX+SEC] Eccellenza pre-audit: idle timeout, loading states, i18n, UX polish 2026-02-20 12:25:52 +01:00
settings.html [FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni 2026-03-07 13:20:24 +01:00
setup-org.html [FIX] Fix annual_turnover field name in setup-org.html 2026-02-17 19:49:57 +01:00
simulate.html [FEAT] Simulazioni Demo + Audit Trail Certificato SHA-256 2026-03-07 13:56:53 +01:00
supply-chain.html [FIX] i18n funzionante + bug audit.html + help system 2026-02-20 11:17:04 +01:00
test-runner.php [TEST] Bottone Reset+Simula+Testa Tutto + preserva admin Benassati 2026-03-07 14:35:20 +01:00
training.html [FIX] i18n funzionante + bug audit.html + help system 2026-02-20 11:17:04 +01:00
whistleblowing.html [FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni 2026-03-07 13:20:24 +01:00