Claude 2288f9d2fc fix: harden PWA caching and client-side auth security ...

- Exclude sensitive API paths (auth, admin, backup, settings) from SW cache
- Restrict upload caching to public assets only (covers, avatars)
- Remove opaque response caching (status 0) for API and uploads
- Clear service worker caches on logout
- Only logout on 401 errors, not transient network failures
- Fix register() TypeScript interface to include invite_token parameter
- Remove unused RegisterPage and DemoBanner imports
- Disable source maps in production build
- Add SRI hash for Leaflet CSS CDN

https://claude.ai/code/session_01SoQKcF5Rz9Y8Nzo4PzkxY8

2026-03-31 00:33:58 +00:00

..

public

v2.6.2 — TREK Rebrand, OSM Enrichment, File Management, Hotel Bookings & Bug Fixes

2026-03-28 16:38:08 +01:00

scripts

Add PWA support for iOS home screen install

2026-03-21 22:21:23 +01:00

src

fix: harden PWA caching and client-side auth security

2026-03-31 00:33:58 +00:00

index.html

fix: harden PWA caching and client-side auth security

2026-03-31 00:33:58 +00:00

package-lock.json

fix: harden PWA caching and client-side auth security

2026-03-31 00:33:58 +00:00

package.json

chore: bump version to 2.7.1

2026-03-30 21:25:35 +02:00

postcss.config.js

Initial commit — NOMAD (Navigation Organizer for Maps, Activities & Destinations)

2026-03-18 23:58:08 +01:00

tailwind.config.js

Initial commit — NOMAD (Navigation Organizer for Maps, Activities & Destinations)

2026-03-18 23:58:08 +01:00

tsconfig.json

refactoring: TypeScript migration, security fixes,

2026-03-27 18:40:18 +01:00

vite.config.js

fix: harden PWA caching and client-side auth security

2026-03-31 00:33:58 +00:00