WEBDIENSTE/appointment-booking-software
1
0
Fork 0
mirror of https://github.com/open-reception/appointment-booking-software.git synced 2026-08-17 21:25:52 +02:00
Code Issues Packages Projects Releases Wiki Activity
617 Commits 67 Branches 21 Tags
main
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hendrik Belitz 9128818481 Remove email from passkey crypto. Validation now occurs via Bootstrap token. 2026-07-07 18:07:23 +02:00
Hendrik Belitz d96c3c7dc6 Prevent race condition on event creation 2026-07-07 17:39:54 +02:00
Hendrik BelitzandKarl Ludwig Weise 76d27e2364 Simplified server route code. Added utility to check if chosen appointment ist still available. Added new error to UI. 2026-06-18 17:20:43 +02:00
Hendrik Belitz df5432776a Merge branch 'main' of https://github.com/open-reception/appointment-booking-software-ghsa-w5g9-g2p4-2g4m 2026-06-04 18:23:50 +02:00
Hendrik Belitz 0d6a43ce41 Always use tenant domain for base url when resending confirmation emails in prod. 2026-06-04 18:23:33 +02:00
Hendrik Belitz 5d29d9c196 Security fix for critical access issue 2026-06-04 17:15:00 +02:00
Hendrik Belitz 897b47f1a3 Merge branch '273-bug-tenantdomain-is-interpreted-inconsistently-confirm-invite-urls-are-malformed' of github.com:open-reception/appointment-booking-software into 273-bug-tenantdomain-is-interpreted-inconsistently-confirm-invite-urls-are-malformed 2026-05-30 20:53:58 +02:00
Hendrik Belitz 4a5b77fb6f Untangle invite from user. Removed redundant data fields. 2026-05-30 20:53:45 +02:00
Hendrik Belitz a16573a94c Fix domain name for tenant (this is no longer the shortName) 2026-05-27 17:58:31 +02:00
Hendrik Belitz db72f6f042 Migration files 2026-05-19 09:53:05 +02:00
Hendrik Belitz 5e77fd1df4 Only delete invites on tenant where staff was deleted 2026-05-16 19:18:25 +02:00
Hendrik Belitz e9c96c049e Changed difficulty from 4 to 5. 2026-05-16 19:12:29 +02:00
Hendrik Belitz 461925a6e4 Added tenant-specific throttling for clients 2026-05-16 18:59:50 +02:00
Hendrik Belitz a65c00bb8c Removed deprecated and authorization-free appointment endpoint. 2026-05-16 18:44:09 +02:00
Hendrik Belitz 3ec5076007 Fixed type error and tests 2026-05-11 12:38:44 +02:00
Hendrik Belitz 4522a44c00 Adding appointments to an existing tunnel is only allowed for the tunnel's client. 2026-05-11 12:35:43 +02:00
Hendrik Belitz f47320dd8a Fix schedule endpoint so it only returns public channels 2026-05-11 11:17:51 +02:00
Hendrik Belitz 518717b325 Merge branch 'main' of https://github.com/open-reception/appointment-booking-software-ghsa-j9rw-x2wv-h5rj 2026-05-08 16:04:13 +02:00
Hendrik Belitz 1f2cbb3a01 Appointment service tests 2026-05-08 15:41:01 +02:00
Hendrik BelitzandCopilot 828b5297dc Boostrapping of user registration. Keypass error fixes. 
Co-authored-by: Copilot <copilot@github.com>
 2026-05-08 15:40:21 +02:00
Hendrik BelitzandCopilot 78dfd9317a Mitigate account takeover in user registration process 
Co-authored-by: Copilot <copilot@github.com>
 2026-05-08 10:47:08 +02:00
Hendrik BelitzandCopilot 7942e151c6 Removed expiry_date from appointments. Added housekeeping task to remove old appointments from db. 
Co-authored-by: Copilot <copilot@github.com>
 2026-05-04 15:26:10 +02:00
Hendrik Belitz 527e1f49e9 Save timezone, use timezone in appointment mails. 2026-04-08 15:43:27 +02:00
HendrikandKarl Ludwig Weise 0c0bfcbeff Update Trivy action version in release workflow 
Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
 2026-04-04 19:20:43 +02:00
HendrikandKarl Ludwig Weise e16905ee4f Update issue templates 2026-04-04 19:20:43 +02:00
HendrikandGitHub 5ddb05d9f0 Update Trivy action version in release workflow 
Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
 2026-03-23 09:46:08 +01:00
HendrikandKarl Ludwig Weise 48eed20c17 Update issue templates 2026-03-20 14:27:08 +01:00
Hendrik Belitz 77b81dc82c Format fixes 2026-03-16 11:37:43 +01:00
Hendrik Belitz 37a02c84c9 Lint and check fixes 2026-03-16 11:37:33 +01:00
Hendrik Belitz bda0862bcf If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted) 2026-03-16 10:46:08 +01:00
HendrikandGitHub 4622ad714c Obfuscate error data from public endpoints (#230) 
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests

* Obfuscate error output
 2026-03-12 17:08:28 +01:00
Hendrik Belitz 17d4846b8d Bootstrap tokens for new clients. Use jti on client tokens. 
Secure my-appointments with token.
 2026-03-11 13:28:07 +01:00
Hendrik Belitz b4ca6680ea Create access tokens for clients from the challenge. 2026-03-11 12:35:08 +01:00
Hendrik Belitz 0da63b1d2c Obfuscate error output 2026-03-11 12:20:33 +01:00
HendrikandGitHub c710142295 Do not apply shortname for system tenant generateBaseUrl (#223) 
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests
 2026-03-11 06:20:22 +01:00
Hendrik Belitz 294581aa10 Fixed tests 2026-03-10 21:56:38 +01:00
Hendrik Belitz 1b883c7d06 Use domain instead of shortName for tenant domain 2026-03-10 21:51:30 +01:00
HendrikandGitHub bd6c10e160 224 remove sensitive information from logs (#225) 
* Logging adapted

* Fix log mocks

* Lint fixes
 2026-03-10 19:08:03 +01:00
Hendrik Belitz 81b7d52e64 Do not apply shortname for system tenant generateBaseUrl 
Do not remove domain name parts if hostname already is a subdomain
 2026-03-06 10:05:18 +01:00
HendrikandGitHub b3c4257ec4 214 calendar agents still appear in availableagents if they are unavailable (#220) 
* Move schedule determination to full UTC. Adapt frontend to handle UTC input. Adapted tests.

* Type fix

* Respect all channels when checking whether an agent is booked.
 2026-03-05 18:03:59 +01:00
HendrikandGitHub 7edd77ded0 214 calendar agents still appear in availableagents if they are unavailable (#219) 
* Move schedule determination to full UTC. Adapt frontend to handle UTC input. Adapted tests.

* Type fix
 2026-03-04 20:56:19 +01:00
HendrikandGitHub 9ac6ab81c6 213 calendar when staff creates appointment for a channel with reservation the email still should be for a successfull appointment booking (#218) 
* If staff creates an appointment, treat it as being already confirmed

* Fixed tests
 2026-03-04 20:46:12 +01:00
Hendrik Belitz d3dd3684e7 Refactored invitation logic to use 30 Minutes and pgsql timestamps consistently. 2026-03-03 15:26:08 +01:00
Hendrik Belitz 10656edf2f Immediate access granted if no appointments in system. 2026-03-03 14:56:17 +01:00
HendrikandGitHub 166373aa85 fixed error and failing unit tests (#203) 2026-02-26 17:29:49 +01:00
Hendrik Belitz 3538d282ff Set preferred options so that yubikey works. 2026-02-16 10:43:40 +01:00
HendrikandGitHub 19edc5aa0e Add npm audit to pipelines. Add trivy scan to release. (#194) 2026-02-08 16:32:27 +01:00
Hendrik Belitz b387469f8d tenants GET should return the tenant of a staff member, should be callable by all registered users. 2026-02-07 16:51:33 +01:00
Hendrik Belitz a2fc4e4d34 Format und type fixes 2026-02-07 11:39:13 +01:00
Hendrik Belitz 7d38db1ce1 Getters should also return staff id relations 2026-02-02 14:37:03 +01:00
Hendrik Belitz 97332c617a Added Cancellation Email template 2026-02-02 14:21:07 +01:00
Hendrik Belitz 3dea6d3121 Permission check 2026-02-02 14:09:10 +01:00
Hendrik Belitz 4ffc86d25d Deny endpoint 2026-02-02 14:05:53 +01:00
Hendrik Belitz 1f34ea6f72 Add locale to encrypted appointment data 2026-02-02 13:50:33 +01:00
Hendrik Belitz 128ca9bfc7 First user of tenant gets access granted, regardless of role. 2026-02-02 13:44:24 +01:00
Hendrik Belitz c5d8d174aa Optionally set staff channel associations when creating or updating a channel. 2026-01-28 17:23:46 +01:00
HendrikGitHubKarl Ludwig Weise
 		16eed3d03e Added missing files and notes to docker container. (#185) 
* Added missing files and notes to docker container.

Dev compose adjusted accordingly (but untested, since it isn't used yet).

Checked release action

* Removed e2e tests from release (not used yet)

* Added missing env vars for unit test

* Missing env

* Display version number

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
 2026-01-28 16:48:12 +01:00
HendrikGitHubCopilot
 		75cdccf5d0 149 allow creation of appointments through staff members (#174) 
* Simplified locals.user
Checked routes for accessibilty

* Fixed tests

* Fixed import errors

* Fixed invite test

* PIN API implementation

* Tests for pin reset

* HOusekeeping

* Update src/routes/api/tenants/[id]/clients/pin-reset/request/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fixes for id and housekeeping

* End routes for staff appointment bookings and check whether client exists.

* Merged main, fixed tests

* Linting errors

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-22 11:48:11 +01:00
HendrikGitHubCopilot
 		a64afbd297 160 book appointment confirm appointment requests (#179) 
* Extension of tenant schema

* Notification service

* Notification endpoints

* Format errors

* Update src/lib/server/db/tenant-schema.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/lib/server/services/notification-service.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Explicit where clause in delete notification

* Update tenant-migrations/0008_neat_swarm.sql

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Sort notifivcations by creation date. Do not explicitly check for existance in mark as read.

* Fixed tests

* Mail templates appointment cancellation

* Appointment cancellation notification texts

* Delete appointment by staff

* Deletion endpoint for staff

* My Appointments endpoint for clients

* Delete appointment by client

* Copilot review fixes

* Fixes after notification changes and updates.

* Fixed limiting errors

* Rejection email template

* Send out request, confirmed notifications, send out confirmed, denied emails.

* Fix test

* MIgration files

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-22 11:39:12 +01:00
HendrikGitHubCopilot
 		e9bd83bcd2 148 provide apis for cancelling appointments staff and client wise (#164) 
* Extension of tenant schema

* Notification service

* Notification endpoints

* Format errors

* Update src/lib/server/db/tenant-schema.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/lib/server/services/notification-service.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Explicit where clause in delete notification

* Update tenant-migrations/0008_neat_swarm.sql

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Sort notifivcations by creation date. Do not explicitly check for existance in mark as read.

* Fixed tests

* Mail templates appointment cancellation

* Appointment cancellation notification texts

* Delete appointment by staff

* Deletion endpoint for staff

* My Appointments endpoint for clients

* Delete appointment by client

* Copilot review fixes

* Fixes after notification changes and updates.

* Fixed limiting errors

* Fix

* Refix fix

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-22 11:28:35 +01:00
Hendrik Belitz 7435f8b6fb Allow client email to be optional 2026-01-21 17:30:13 +01:00
Hendrik Belitz 224d4a9539 Fixed test 2026-01-21 17:30:00 +01:00
Hendrik Belitz 652380c08c Fixed formatting 2026-01-21 17:29:53 +01:00
Hendrik Belitz df50955d8c Merge branch 'main' of github.com:open-reception/appointment-booking-software into 153-book-appointment-allow-clients-to-select-if-they-want-email-notifications 2026-01-21 17:16:10 +01:00
HendrikGitHubCopilot
 		fb3b880204 142 provide logic and apis to use more than one passkey with a staff member (#163) 
* Basic implementation

* Syntax fixes

* Implemented PRF for passkey administration. Updated docs, renamed confusing endpoints.

* Update src/routes/api/auth/passkeys/[passkeyId]/crypto/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Removed unused param

* Merge fixes, formatting fixes, database migrations

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-13 18:35:42 +01:00
HendrikGitHubCopilot
 		c552945643 141 provide apis for pin reset (#162) 
* Simplified locals.user
Checked routes for accessibilty

* Fixed tests

* Fixed import errors

* Fixed invite test

* PIN API implementation

* Tests for pin reset

* HOusekeeping

* Update src/routes/api/tenants/[id]/clients/pin-reset/request/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fixes for id and housekeeping

* DB migrations

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-13 18:17:42 +01:00
HendrikGitHubCopilot
 		a6707ef081 151 bare minimum notification system (#161) 
* Extension of tenant schema

* Notification service

* Notification endpoints

* Format errors

* Update src/lib/server/db/tenant-schema.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/lib/server/services/notification-service.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Explicit where clause in delete notification

* Update tenant-migrations/0008_neat_swarm.sql

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Sort notifivcations by creation date. Do not explicitly check for existance in mark as read.

* Fixed tests

* No longer store texts in notifications

* Single source of truth for notification types

* Formatting

* Fixed linting errors

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-13 18:05:32 +01:00
HendrikGitHubhbelcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Copilot
 		b81706a8d9 Security hotfix prf (#146) 
* Use PRF extension for deterministic Zero Knowledge Shards

* Webauthn validation lib

* Use attestation and validate passkeys

* Use attestation objects and cose-format keys in frontend. Added additional checks so that we don't create orphaned users when validation fails.

* Fixed type check error

* Fix PRF salt documentation to match implementation (#147)

* Initial plan

* Fix PRF salt documentation to match implementation

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Use dev instead of node env

* Migration fixes

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>
 2026-01-02 15:08:23 +01:00
HendrikandGitHub 1959115d70 127 add checkpermission everywhere where needed (#140) 
* Simplified locals.user
Checked routes for accessibilty

* Fixed tests

* Fixed import errors

* Fixed invite test
 2025-12-16 11:25:19 +01:00
Hendrik Belitz 145e931f38 Do not commit audits 2025-12-14 14:39:36 +01:00
HendrikandGitHub 6a610b96b1 When client selects an appointment that does not need to be confirmed… (#133) 
* When client selects an appointment that does not need to be confirmed, send out an email. Also prepared the appointment confirmation call to send out an email.

* Removed old client table. Fixed tests.

* MIgration for removed table
 2025-11-17 17:04:57 +01:00
HendrikandGitHub 983f6c3857 Use the normal invitation flow when inviting an initial tenant admin. (#122) 2025-10-29 16:26:49 +01:00
HendrikGitHubCopilot
 		12be3016f4 Validate the setup state in all relevant actions. Update it according… (#119) 
* Validate the setup state in all relevant actions. Update it according to the tenant's current state.

* Update src/lib/server/db/central-schema.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fixed schema, fixed tests, incorporated review advice

* Unused variable error fixed.

* Refactored deletion methods. Fixed partial deletion test.

* Try to delete user first before deleting key shares (to make sure the transaction fails if we cannot delete the user)

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-23 17:11:23 +02:00
HendrikGitHubCopilot
 		9c7de2a6bd 92 check entity deletion business rules (#107) 
* Added conflict checks to agent and channel deletion.

* Added missing agentId to appointment requests. Fixed tests for new error behavior.

* Removed import

* Archive agents and channels instead of deleting them.

* Update src/lib/server/services/appointment-service.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-21 18:14:19 +02:00
HendrikandGitHub 44cc5d0837 Merge pull request #102 from open-reception/feat/settings 
Feat/settings
 2025-10-16 09:26:00 +02:00
Hendrik Belitz 583cb56670 Names in channel update schema should be an optional property 2025-10-15 17:34:30 +02:00
HendrikGitHubCopilot
 		6c63ac3c80 Fetch tenant (#101) 
* Fetch tenant

* Update src/routes/api/tenants/[id]/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/routes/api/tenants/[id]/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Column rename

* Fixed tests

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-12 15:08:32 +02:00
Hendrik Belitz 7f1fee52d0 Removed default value (not needed, breaks typings) 2025-10-09 10:18:59 +02:00
Hendrik Belitz b739fa0d2b Fixed db schema, removed constraints that referenced a table in another db 2025-10-07 19:43:25 +02:00
Hendrik Belitz 988707fc78 DO not reset global admin to confirmed. 2025-10-07 19:25:56 +02:00
Hendrik Belitz 179f6d2808 Added missing existance check 2025-10-07 18:37:30 +02:00
Hendrik Belitz 8ae28d283c Merge branch 'main' of github.com:open-reception/appointment-booking-software 2025-10-07 18:32:21 +02:00
Hendrik Belitz bdc157bda6 Set access-granted for global admin. 2025-10-07 18:32:13 +02:00
HendrikGitHubCopilot
 		4572352341 Client and staff access to appointments and schedules (#90) 
* Web workers for crypto functions. Crypto key storage in db.

* First prototype appointment service and api

* Basic flows für clients.

* Staff crypto

* Browser crypto functions

* Get appointments from a date range

* API docs

* Schedule API, fixed schedule errors

* Tests and bugfixes

* Formatting

* enhanced and unified Browser-Crypto-Utilities
trying to create a new tunnel when tenant has no users now results in an error.
user creation now has a confirmation state.

* Staff API, getting and updating tunnel data.

* Tests for staff endpoints
Fixed for confirmationState
Fixed tests

* Moved logic to staff service

* Moved logic to appoointment service

* calendar route for staff members. schedule route for clients.

* Fix client access to certain routes

* Update src/routes/api/tenants/[id]/staff/__tests__/staff-api.test.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/routes/api/tenants/[id]/staff/[staffId]/public-key/__tests__/public-key.test.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/routes/api/tenants/[id]/appointments/tunnels/add-staff-key-shares/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Security fixes for staff-crypto key retrieval.

* LInting errors

* DB Migrations

* Removed isEncrypted property

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-05 15:49:11 +02:00
HendrikandGitHub 636ff6dd0b Fix/channel is public api (#93) 
* Channel pause

* Fix tenant config GET

* Fixed test
 2025-10-05 15:42:43 +02:00
HendrikGitHubKarl Ludwig WeiseKarl Ludwig Weise
 		5965fada38 Make descriptions multilingual (#89) 
* Make descriptions multilingual

* Format and test fixes

* Update src/lib/server/db/tenant-schema.ts

* Fix tenant-switcher to update instantly

* Fix sql migrations for description

* Add languages to tenant table

* Fix tenant schema

* Use objects for translated fields

* Fix format

* Fix lint

* Allow longer descriptions for channels

* Field Localizations are based on tenant locales not supportedLocales

* Fix agent image list preview

* Improve language tab keyboard navigation

* Fix falsy redirect after store init

---------

Co-authored-by: Karl Ludwig Weise <office@ludwigweise.de>
Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
 2025-10-01 18:43:01 +02:00
HendrikandGitHub c2e662cc15 Update new access token in session table after switching tenants. (#87) 
* Update new access token in session table after switching tenants.

* Fixed session might be undefined

* Image should be nullable when creating or updating an agent or uploading tenant logos.
 2025-09-26 10:57:41 +02:00
HendrikandGitHub b1a045c7f5 Bugfix/drizzle no longer uses migration hashes (#84) 
* Let drizzle handle migration decisions.

* Make sure initial admin is a global admin

* Formatting
 2025-09-22 15:45:14 +02:00
HendrikGitHubCopilot
 		e486072ffa Refactor/error and api handling (#82) 
* DB migrations

* Format errors in migrations

* Implemented new error and permission handling.

* Updated and fixed tests

* Update src/routes/api/tenants/[id]/appointments/[appointmentId]/cancel/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/routes/api/tenants/[id]/agents/[agentId]/absences/[absenceId]/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/routes/api/tenants/[id]/channels/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fixed test

* Added error constants

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-09-18 15:04:06 +02:00
HendrikandGitHub 629351d6fa Scheduling api (#68) 
* Additions for agent absencies and appointments. Schedule determination.

* Scheduling tests. Agent and appointment tests.

* Absence and Agent APIs

* Linting

* Appointment API (staffing side)

* LInting and fixed tests

* Centralised permission check

* Permission refactorings, session bugfixes

* Test fixes (first part)

* Test fixes

* Fixed type

* Linting fixes

* Fixed tests

* Formatting

* Data schema changes

* Adaptions to last merges and changes

* Incorporated changes as discussed in weekly

* Test fix
 2025-09-15 16:22:41 +02:00
Hendrik Belitz c1e1e5b681 Check tenant shortname according to valid input pattern on creation and edit. 2025-09-08 16:32:50 +02:00
Hendrik Belitz eaaa590748 60 - Generate and migrate central database on startup if needed. Added informational logging to the migration services. 2025-09-08 16:16:39 +02:00
HendrikandGitHub 94e20ca9aa BUG fix. Refresh route should properly refresh the token and be calla… (#69) 
* BUG fix. Refresh route should properly refresh the token and be callable when cookie token is no longer valid.

* Use old session id from old token for refresh. Refresh offset set to ten minutes.
 2025-09-08 11:36:11 +02:00
HendrikandGitHub 22dc3e71d6 71 implemented delete tenant route (#73) 
* 71 implemented delete tenant route

* Fixed test
 2025-09-08 10:35:47 +02:00
Hendrik Belitz ea5a7e50ce 67 - Refactored backend errors, added additional guards for tenant creation 2025-09-07 15:51:54 +02:00
Hendrik Belitz 18df434b71 Type check fix 2025-09-01 15:55:53 +02:00
Hendrik Belitz 8796782d1d Fix session expiration and tests 2025-09-01 15:47:51 +02:00
HendrikandGitHub 55ae2fd2a7 Merge pull request #61 from open-reception/feat/admin-setup 
Admin Setup
 2025-08-29 12:57:59 +02:00
Hendrik Belitz 8cd59ad9b5 Linting and formatting errors 2025-08-27 11:16:01 +02:00
Hendrik Belitz 7f71d5d83f Fixed challenge string (needs to be base64url) 
Fixed logout (needs credentials)
Fixed passkey counter (does not neccesarly work for browser/os based passkeys)
 2025-08-27 10:16:11 +02:00