15 Commits

Author	SHA1	Message	Date
DanielS	80abbfe566	security: replace public PDF URLs with authenticated API route, private bucket	2026-07-04 17:43:33 +02:00
DanielS	553ec7eadd	fix(admin-orders): make PDF download/view always available by generating PDF dynamically on the fly if missing	2026-07-03 15:14:34 +02:00
DanielS	19e9733144	feat(admin): add API endpoint to download order confirmation PDF securely as attachment	2026-06-30 15:36:42 +02:00
DanielS	da7bd91b6f	fix: query orders using admin client in admin routes to bypass RLS and show all orders to admin	2026-06-25 23:30:29 +02:00
DanielS	45fb87d589	feat: add admin dashboard revenue chart and fix empty customer order bug	2026-06-25 23:23:53 +02:00
DanielS	d3df9998f0	feat: Add database backup export and import as ZIP in admin settings	2026-06-25 15:18:41 +02:00
DanielS	3228c76675	fix: use maybeSingle for settings query to avoid failing when the table is empty	2026-06-23 04:36:16 +02:00
DanielS	5ba9869400	feat: create users and settings tables, replace getSession with getUser	2026-06-23 04:05:39 +02:00
DanielS	235efd5a47	fix: use static auth cookie name to sync session across browser and server contexts	2026-06-23 02:58:55 +02:00
DanielS	ca69db2395	fix: prioritize SUPABASE_URL and SUPABASE_ANON_KEY server-side environment variables	2026-06-23 02:37:48 +02:00
DanielS	e789a38d19	fix: add environment variable fallback for Supabase client configuration	2026-06-23 02:36:31 +02:00
DanielS	fa1edc9c12	Add cookies handling to smtp-settings routes	2026-06-23 00:27:55 +02:00
DanielS	bab2930b97	Add cookies handling to send-test-email route	2026-06-23 00:26:08 +02:00
DanielS	4402d4ec64	Add SMTP mail utility, admin settings page, and API routes for SMTP configuration and test email	2026-06-23 00:17:41 +02:00
DanielS	d96be1ace9	feat(orders): idempotency guard, order numbers, button lock, success page, my-orders, admin polling	2026-06-17 01:48:06 +02:00