fix: rename API parameter 'ref' to 'doc' for privacy extensions compatibility

ClearURLs and similar privacy extensions block the 'ref' parameter
as it's commonly used for referrer tracking. Renamed to 'doc' which
is not targeted by these extensions.

Closes #19

Author: btouchard

backend/internal/presentation/api/documents/handler.go

@@ -488,16 +488,16 @@ type FindOrCreateDocumentResponse struct {
 	MimeType   string `json:"mimeType,omitempty"`
 }
 
-// HandleFindOrCreateDocument handles GET /api/v1/documents/find-or-create?ref={reference}
+// HandleFindOrCreateDocument handles GET /api/v1/documents/find-or-create?doc={reference}
 func (h *Handler) HandleFindOrCreateDocument(w http.ResponseWriter, r *http.Request) {
 	ctx := r.Context()
 
-	// Get reference from query parameter
-	ref := r.URL.Query().Get("ref")
+	// Get reference from query parameter (renamed from "ref" to "doc" to avoid ClearURLs blocking)
+	ref := r.URL.Query().Get("doc")
 	if ref == "" {
-		logger.Logger.Warn("Find or create request missing ref parameter",
+		logger.Logger.Warn("Find or create request missing doc parameter",
 			"remote_addr", r.RemoteAddr)
-		shared.WriteError(w, http.StatusBadRequest, shared.ErrCodeBadRequest, "ref parameter is required", nil)
+		shared.WriteError(w, http.StatusBadRequest, shared.ErrCodeBadRequest, "doc parameter is required", nil)
 		return
 	}
 

backend/internal/presentation/api/documents/handler_test.go

@@ -513,7 +513,7 @@ func TestHandler_HandleFindOrCreateDocument_FindExisting(t *testing.T) {
 		authorizer:       newMockAuthorizer([]string{}, false),
 	}
 
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?ref=https://example.com/doc.pdf", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?doc=https://example.com/doc.pdf", nil)
 	rec := httptest.NewRecorder()
 
 	handler.HandleFindOrCreateDocument(rec, req)
@@ -550,7 +550,7 @@ func TestHandler_HandleFindOrCreateDocument_CreateNew(t *testing.T) {
 		authorizer:      newMockAuthorizer([]string{}, false),
 	}
 
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?ref=https://example.com/new-doc.pdf", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?doc=https://example.com/new-doc.pdf", nil)
 
 	// Add authenticated user to context
 	ctx := addUserToContext(req.Context(), testUser)
@@ -587,7 +587,7 @@ func TestHandler_HandleFindOrCreateDocument_UnauthenticatedCreate(t *testing.T)
 		authorizer:      newMockAuthorizer([]string{}, false),
 	}
 
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?ref=https://example.com/new-doc.pdf", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/documents/find-or-create?doc=https://example.com/new-doc.pdf", nil)
 	// No user in context
 	rec := httptest.NewRecorder()
 

backend/openapi.yaml

@@ -342,7 +342,7 @@ paths:
       tags:
         - Documents
       parameters:
-        - name: ref
+        - name: doc
           in: query
           required: true
           schema:

docs/en/api.md

@@ -111,7 +111,7 @@ GET /api/v1/users/me
 #### Find or Create Document
 
 ```http
-GET /api/v1/documents/find-or-create?ref=policy_2025
+GET /api/v1/documents/find-or-create?doc=policy_2025
 ```
 
 **Response** (200 OK):

docs/fr/api.md

@@ -111,7 +111,7 @@ GET /api/v1/users/me
 #### Trouver ou Créer un Document
 
 ```http
-GET /api/v1/documents/find-or-create?ref=policy_2025
+GET /api/v1/documents/find-or-create?doc=policy_2025
 ```
 
 **Réponse** (200 OK) :

webapp/src/services/documents.ts

@@ -103,7 +103,7 @@ export const documentService = {
   async findOrCreateDocument(reference: string): Promise<FindOrCreateDocumentResponse> {
     const response = await http.get<ApiResponse<FindOrCreateDocumentResponse>>(
       '/documents/find-or-create',
-      { params: { ref: reference } }
+      { params: { doc: reference } }
     )
     return response.data.data
   },