JSLMPR 0d45f898f7 I continued with the security-review step from the plan and tightened the API contract so internal storage locations no longer leak out of normal responses. ... Changes: - src/main/java/org/example/videoclips/application/VideoAssetService.java:401 no longer exposes sourceObjectKey on asset reads or objectKey on clip listings. - src/main/java/org/example/videoclips/processing/ClipProcessor.java:64 now records a sanitized SOURCE_MATERIALIZED event message instead of logging the worker-local path. - src/test/java/org/example/videoclips/api/VideoAssetControllerTest.java:67 now asserts those fields are absent and that job events do not contain uploads/ or tmp/.		2026-07-09 00:55:35 +02:00
.idea	initial	2026-07-08 17:00:58 +02:00
docs	wip	2026-07-08 22:25:12 +02:00
src	I continued with the security-review step from the plan and tightened the API contract so internal storage locations no longer leak out of normal responses.	2026-07-09 00:55:35 +02:00
tmp	I changed the signed clip download flow so it uses the clip’s persisted objectKey instead of deriving a fake path from clipId. The fix is in src/main/java/org/example/videoclips/application/	2026-07-09 00:34:14 +02:00
.gitignore	initial	2026-07-08 17:00:58 +02:00
pom.xml	The storage port now has an opt-in S3-compatible implementation in src/main/java/org/example/videoclips/storage/S3ObjectStorageAdapter.java. It uses the AWS SDK presigner to generate multipart	2026-07-08 23:47:05 +02:00