rckrdmrd
50a821a415
- HERENCIA-SIMCO.md actualizado con directivas v3.7 y v3.8 - Actualizaciones de configuracion Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
74 lines
2.2 KiB
Markdown
74 lines
2.2 KiB
Markdown
# Analisis de Modulos Core Auth - BF-02
|
|
|
|
**Fecha:** 2026-01-10
|
|
**Fase:** 1.1-1.2 - Analisis de Modulos Core
|
|
**Estado:** COMPLETADO
|
|
|
|
---
|
|
|
|
## Resumen Ejecutivo
|
|
|
|
| Modulo | Endpoints Doc | Endpoints Impl | Completitud |
|
|
|--------|---------------|----------------|-------------|
|
|
| SAAS-001 Auth | 17 | 8 | 47% (MFA/OAuth no impl) |
|
|
| SAAS-002 Tenants | 6 | 4 | 100% de endpoints completados |
|
|
| SAAS-003 Users | 13 | ~9 | 69% |
|
|
|
|
**Discrepancias Totales:** 12
|
|
|
|
---
|
|
|
|
## Discrepancias Criticas Identificadas
|
|
|
|
### Auth (SAAS-001)
|
|
|
|
| # | Tipo | Documentado | Implementado | Severidad |
|
|
|---|------|-------------|--------------|-----------|
|
|
| 1 | Endpoint | `/auth/password/forgot` | `/auth/password/request-reset` | MENOR |
|
|
| 2 | Endpoint | `/auth/oauth/*` | No existe | MAYOR |
|
|
| 3 | Endpoint | `/auth/mfa/*` | No existe | MAYOR |
|
|
| 4 | Endpoint | `/auth/sessions/*` | No existe | MAYOR |
|
|
| 5 | Feature | MFA (TOTP) | Tabla DDL existe, no implementado | MAYOR |
|
|
|
|
### Users (SAAS-003)
|
|
|
|
| # | Tipo | Documentado | Implementado | Severidad |
|
|
|---|------|-------------|--------------|-----------|
|
|
| 8 | Endpoint | `POST /users` | No existe | MAYOR |
|
|
| 9 | Endpoint | `DELETE /users/:id` | No existe | MAYOR |
|
|
| 10 | Endpoint | `/invitations/:token/accept` | No existe | MAYOR |
|
|
| 11 | Column | `role` (string directo) | Usa tabla `user_roles` (FK) | MEJORA |
|
|
| 12 | Endpoint | `/roles/*` | Ubicado en `/rbac/roles/*` | MENOR |
|
|
|
|
### Tenants (SAAS-002)
|
|
|
|
| # | Tipo | Documentado | Implementado | Severidad |
|
|
|---|------|-------------|--------------|-----------|
|
|
| 6 | Column | `favicon_url` | No existe en DDL | MENOR |
|
|
| 7 | Endpoint | `/tenants/current/settings` | No existe | MENOR |
|
|
|
|
---
|
|
|
|
## Validaciones de Seguridad
|
|
|
|
- RLS: COMPLETAMENTE IMPLEMENTADO en todas las tablas
|
|
- Password Security: bcrypt cost 12
|
|
- Token Hashing: SHA256
|
|
- JWT Claims: incluyen tenant_id
|
|
|
|
---
|
|
|
|
## Recomendaciones
|
|
|
|
### CRITICAS (inmediato)
|
|
1. Actualizar SAAS-001 para marcar OAuth y MFA como "Planificado"
|
|
2. Implementar `POST /users`, `DELETE /users/:id`, `/invitations/:token/accept`
|
|
|
|
### ALTAS (proxima sprint)
|
|
1. Alinear ruta RBAC con documentacion
|
|
2. Agregar campo `favicon_url` a DDL tenants
|
|
|
|
---
|
|
|
|
**Entregable de:** FASE 1.1-1.2
|