Maurice 4ddfa92c14 security: require auth for file and photo uploads ...

/uploads/files/ and /uploads/photos/ now require a valid Bearer token.
Covers and avatars remain public (needed for shared pages and profiles).
Prevents unauthenticated access to uploaded documents and trip photos.

2026-03-30 20:51:38 +02:00

..

src

security: require auth for file and photo uploads

2026-03-30 20:51:38 +02:00

.env.example

harden runtime config and automate first-run permissions

2026-03-30 13:19:01 -03:00

package-lock.json

feat: email notifications, webhook support, ICS export — closes #110

2026-03-30 17:07:33 +02:00

package.json

feat: email notifications, webhook support, ICS export — closes #110

2026-03-30 17:07:33 +02:00

reset-admin.js

Stabilize core: better-sqlite3, versioned migrations, graceful shutdown

2026-03-22 17:52:24 +01:00

tsconfig.json

fix: resolve all TypeScript errors via proper Express 5 typed route params

2026-03-28 20:13:24 +00:00