DanielS 7119383139 fix(security): harden licserver config access controls ...

- Add auth guard to getLicServerConfig() - unauthenticated callers
  now receive null config instead of DB values
- Remove non-existent 'superadmin' role from saveLicServerConfig()
  check (only 'admin' exists per project schema)
- New migration: restrict settings table WRITE to admins only
  (previously any authenticated user could overwrite licserver_api_key)

2026-07-14 17:35:12 +02:00

..

actions

fix(security): harden licserver config access controls

2026-07-14 17:35:12 +02:00

supabase

security: fix 6 critical RLS vulns, SHA-256 hash, DSGVO [GELÖSCHT], completed status

2026-07-06 22:39:05 +02:00

types

feat(licserver): add partner API proxy routes and types

2026-07-14 17:24:00 +02:00

utils

Add lockout logic and email notification utils

2026-06-30 22:28:30 +02:00

checkout-split.test.ts

test: add unit tests for frontend top-down auto-reset and backend split logic

2026-07-09 21:56:13 +02:00

checkout-split.ts

test: add unit tests for frontend top-down auto-reset and backend split logic

2026-07-09 21:56:13 +02:00

license-transform.ts

feat(admin): move allow_update_discount option to product level

2026-07-10 09:15:34 +02:00

types.ts

feat(admin): move allow_update_discount option to product level

2026-07-10 09:15:34 +02:00

utils.ts

fix: change default internal rewrite and server resolution host to kong

2026-07-04 17:19:09 +02:00

wizard-state.test.ts

test: add unit tests for frontend top-down auto-reset and backend split logic

2026-07-09 21:56:13 +02:00

wizard-state.ts

feat: implement category flags, drop global tables, fix sidebar sticky layout

2026-07-10 15:27:55 +02:00