 Florian Sylvain
|
80f7037d3a
|
feat: Users API, ownership transfer and removal of the legacy role string
|
2026-10-27 03:08:15 +01:00 |
|
|
Florian Sylvain
|
094df63a7f
|
feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.
|
2026-10-27 00:45:24 +01:00 |
|
|
Florian Sylvain
|
8c6c6456da
|
feat: roles system backend
|
2026-10-26 05:02:49 +01:00 |
|
|
Florian Sylvain
|
ea98c5ec05
|
fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)
|
2026-10-22 00:49:19 +02:00 |
|
|
Florian Sylvain
|
73a75d5cb9
|
feat: custom content type icons, built-in types, user lookup
|
2026-10-19 18:22:55 +02:00 |
|
|
Florian Sylvain
|
58d58f5a04
|
feat: custom content types backend
|
2026-10-19 17:01:37 +02:00 |
|
|
Florian Sylvain
|
0eb46b0d74
|
feat: SEO backend data (1/4)
|
2026-10-15 19:30:29 +02:00 |
|
|
Florian Sylvain
|
b34a173d83
|
feat: Authors feature backend (and upgraded deprecated mods)
|
2026-10-14 17:45:00 +02:00 |
|
|
Florian Sylvain
|
a11338094e
|
feat: Sites feature backend
|
2026-10-14 03:56:50 +02:00 |
|
 fsylvain
|
f1d56ef50e
|
feat: image variants engine
|
2026-10-08 02:33:32 +02:00 |
|
|
fsylvain
|
f914eae3c5
|
feat: setup logs retention by max file size
|
2026-10-07 22:02:13 +02:00 |
|
|
fsylvain
|
50b1649965
|
feat: activity log backend foundation
|
2026-10-06 20:35:03 +02:00 |
|
|
fsylvain
|
e82d0ce254
|
feat: media duplicate purge, part 1 of 3: persisted purge settings and the purge API
|
2026-10-05 18:24:03 +02:00 |
|
|
fsylvain
|
844842fdae
|
feat: integration v2 and API key PART 1/3
|
2026-10-04 21:56:14 +02:00 |
|
|
fsylvain
|
0d99544579
|
feat(API): media library
|
2026-09-30 18:35:28 +02:00 |
|
|
fsylvain
|
461e93e3b5
|
feat: add Role (owner|admin) to the user domain, persistence model and mapper
|
2026-09-30 00:58:58 +02:00 |
|
|
fsylvain
|
acdef18b37
|
feat(API): user invitations and emails
|
2026-09-29 07:15:17 +02:00 |
|
|
fsylvain
|
7aae704d0a
|
feat(API): optional display name on users
|
2026-09-29 06:52:58 +02:00 |
|
|
fsylvain
|
f3ec3d2fa2
|
fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused
|
2026-09-25 05:03:34 +02:00 |
|
|
fsylvain
|
aa865af2e9
|
refac: reamaining auth surface rewrite, T0
|
2026-09-24 05:11:49 +02:00 |
|
|
fsylvain
|
6e9e108033
|
refac: several unverified users can exist at once: an empty reset or verification code is stored as no value so it doesn't break the unique constraint, and deleting a user removes the row so the same username and email can register again
|
2026-09-24 01:59:24 +02:00 |
|
|
Floriansylvain
|
b50efae8a8
|
refac: mappers, file names
|
2025-12-22 00:06:17 +01:00 |
|