WEBDIENSTE/appointment-booking-software
1
0
Fork 0
mirror of https://github.com/open-reception/appointment-booking-software.git synced 2026-09-12 12:17:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
370 Commits 66 Branches 24 Tags
020afbfe536982caa279fe9fad91fb5292cee484
Commit Graph
370 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Karl Ludwig Weise 020afbfe53 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/picomatch-2.3.2' into feat/package-updates 2026-04-20 09:07:55 +02:00
Karl Ludwig Weise c9c9cdc290 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/flatted-3.4.2' into feat/package-updates 2026-04-20 09:07:44 +02:00
Karl Ludwig Weise 99f55f1f0a Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/effect-3.21.0' into feat/package-updates 2026-04-20 09:07:36 +02:00
Karl Ludwig Weise 99400f6497 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-2e149f5a3a' into feat/package-updates 2026-04-20 09:07:25 +02:00
Karl Ludwig Weise 06245ec224 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/devalue-5.6.4' into feat/package-updates 2026-04-20 09:07:14 +02:00
Karl Ludwig Weise cb7764b459 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-770cfcd984' into feat/package-updates 2026-04-20 09:06:30 +02:00
Karl Ludwig Weise 1e9dd1a65e Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/svelte-5.53.6' into feat/package-updates 2026-04-20 09:06:19 +02:00
Karl Ludwig Weise a41646ef92 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/rollup-4.59.0' into feat/package-updates 2026-04-20 09:06:09 +02:00
Karl Ludwig WeiseGitHubKarl Ludwig Weise
 		a97d64f0e3 Secure staff public keys (#231) 
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests

* Obfuscate error output

* Create access tokens for clients from the challenge.

* Bootstrap tokens for new clients. Use jti on client tokens.
Secure my-appointments with token.

* If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted)

* Lint and check fixes

* Format fixes

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
 2026-04-07 18:34:17 +02:00
Karl Ludwig Weise d2b3e544bb Added --ignore-scripts to all npm ci installs 2026-03-31 17:26:56 +02:00
dependabot[bot]andGitHub 7759510b21 Bump picomatch from 2.3.1 to 2.3.2 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 03:55:03 +00:00
Karl Ludwig Weise a57b80281d Removed trivy vunerability scanner due to their security issues 2026-03-25 10:36:49 +01:00
Karl Ludwig Weise 4d125dc59a Fix calendar appointment positions coming in utc 2026-03-24 20:23:51 +01:00
Karl Ludwig Weise cc4bc76f53 Added translation fixes 2026-03-24 20:23:51 +01:00
Karl Ludwig Weise cc174eec68 Fix pausing/activating channels 2026-03-24 20:23:51 +01:00
HendrikandGitHub 5ddb05d9f0 Update Trivy action version in release workflow 
Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
 2026-03-23 09:46:08 +01:00
dependabot[bot]andGitHub c6065a7a12 Bump flatted from 3.3.3 to 3.4.2 
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-21 15:00:37 +00:00
dependabot[bot]andGitHub 9b652c69a3 Bump effect from 3.19.14 to 3.21.0 
Bumps [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) from 3.19.14 to 3.21.0.
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@3.21.0/packages/effect)

---
updated-dependencies:
- dependency-name: effect
  dependency-version: 3.21.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-20 21:58:10 +00:00
dependabot[bot]andGitHub fec32c0dd4 Bump kysely and @inlang/paraglide-js 
Bumps [kysely](https://github.com/kysely-org/kysely) to 0.28.14 and updates ancestor dependency [@inlang/paraglide-js](https://github.com/opral/paraglide-js). These dependencies need to be updated together.


Updates `kysely` from 0.27.6 to 0.28.14
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](https://github.com/kysely-org/kysely/compare/0.27.6...v0.28.14)

Updates `@inlang/paraglide-js` from 2.9.1 to 2.15.0
- [Changelog](https://github.com/opral/paraglide-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opral/paraglide-js/commits)

---
updated-dependencies:
- dependency-name: kysely
  dependency-version: 0.28.14
  dependency-type: indirect
- dependency-name: "@inlang/paraglide-js"
  dependency-version: 2.15.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-20 21:39:44 +00:00
HendrikandKarl Ludwig Weise 48eed20c17 Update issue templates 2026-03-20 14:27:08 +01:00
Hendrik Belitz 77b81dc82c Format fixes 2026-03-16 11:37:43 +01:00
Hendrik Belitz 37a02c84c9 Lint and check fixes 2026-03-16 11:37:33 +01:00
Hendrik Belitz bda0862bcf If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted) 2026-03-16 10:46:08 +01:00
Karl Ludwig Weise 0bd45cf342 Merge remote-tracking branch 'origin/main' into secure-staff-public-keys 2026-03-16 09:27:17 +01:00
HendrikandGitHub 4622ad714c Obfuscate error data from public endpoints (#230) 
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests

* Obfuscate error output
 2026-03-12 17:08:28 +01:00
dependabot[bot]andGitHub 1b5b81ce36 Bump devalue from 5.6.2 to 5.6.4 
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.2 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.2...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-12 15:33:14 +00:00
Hendrik Belitz 17d4846b8d Bootstrap tokens for new clients. Use jti on client tokens. 
Secure my-appointments with token.
 2026-03-11 13:28:07 +01:00
Hendrik Belitz b4ca6680ea Create access tokens for clients from the challenge. 2026-03-11 12:35:08 +01:00
Hendrik Belitz 0da63b1d2c Obfuscate error output 2026-03-11 12:20:33 +01:00
Karl Ludwig WeiseGitHubKarl Ludwig Weise
 		010855efa8 Added deployment docs (#228) 
* Added deployment docs

* Fix lint

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
 2026-03-11 11:58:59 +01:00
HendrikandGitHub c710142295 Do not apply shortname for system tenant generateBaseUrl (#223) 
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests
 2026-03-11 06:20:22 +01:00
Hendrik Belitz 294581aa10 Fixed tests 2026-03-10 21:56:38 +01:00
Hendrik Belitz 1b883c7d06 Use domain instead of shortName for tenant domain 2026-03-10 21:51:30 +01:00
HendrikandGitHub bd6c10e160 224 remove sensitive information from logs (#225) 
* Logging adapted

* Fix log mocks

* Lint fixes
 2026-03-10 19:08:03 +01:00
Karl Ludwig Weise fc385fc9cc Only show empty slots in the future 2026-03-10 19:07:08 +01:00
Karl Ludwig Weise 8bfd80aa26 Use UTC times for slot templates 2026-03-10 10:55:27 +01:00
Karl Ludwig Weise fe67e23dec Set refresh interval to 5 minutes 2026-03-10 09:10:33 +01:00
Karl Ludwig Weise 9e0dc6b870 Fix appointment positions after change to UTC 2026-03-09 10:07:00 +01:00
Karl Ludwig WeiseGitHubKarl Ludwig Weise
 		09ffc21523 Added flow for staff members to create appointments (#204) 
* Added flow for staff members to create appointments

* Add calendar page title

* Remove security check npm audit for pull-requests

* Fix docker build to be multi-platform

* Attempt to fix tests

* Remove obsolete test

* Refresh session every 3 minutes

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
 2026-03-06 10:22:28 +01:00
Hendrik Belitz 81b7d52e64 Do not apply shortname for system tenant generateBaseUrl 
Do not remove domain name parts if hostname already is a subdomain
 2026-03-06 10:05:18 +01:00
HendrikandGitHub b3c4257ec4 214 calendar agents still appear in availableagents if they are unavailable (#220) 
* Move schedule determination to full UTC. Adapt frontend to handle UTC input. Adapted tests.

* Type fix

* Respect all channels when checking whether an agent is booked.
 2026-03-05 18:03:59 +01:00
HendrikandGitHub 7edd77ded0 214 calendar agents still appear in availableagents if they are unavailable (#219) 
* Move schedule determination to full UTC. Adapt frontend to handle UTC input. Adapted tests.

* Type fix
 2026-03-04 20:56:19 +01:00
HendrikandGitHub 9ac6ab81c6 213 calendar when staff creates appointment for a channel with reservation the email still should be for a successfull appointment booking (#218) 
* If staff creates an appointment, treat it as being already confirmed

* Fixed tests
 2026-03-04 20:46:12 +01:00
Karl Ludwig WeiseandGitHub 9d772a99d1 Merge pull request #217 from open-reception/210-invitation-e-mail-expires-earlier-than-copy-says-30-minutes 
Refactored invitation logic to use 30 Minutes and pgsql timestamps co…
 2026-03-04 20:43:59 +01:00
Karl Ludwig WeiseandGitHub e43a368cff Merge pull request #216 from open-reception/212-new-staff-members-should-always-have-access_granted-if-no-appointments-have-been-created-yet 
Immediate access granted if no appointments in system.
 2026-03-04 20:38:53 +01:00
Hendrik Belitz d3dd3684e7 Refactored invitation logic to use 30 Minutes and pgsql timestamps consistently. 2026-03-03 15:26:08 +01:00
Hendrik Belitz 10656edf2f Immediate access granted if no appointments in system. 2026-03-03 14:56:17 +01:00
dependabot[bot]andGitHub 327fdde971 Bump minimatch 
Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-01 18:06:46 +00:00
dependabot[bot]andGitHub 7573bb2777 Bump svelte from 5.46.4 to 5.53.6 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.46.4 to 5.53.6.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.6/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-28 17:47:00 +00:00
dependabot[bot]andGitHub 0d93b87ed4 Bump rollup from 4.43.0 to 4.59.0 
Bumps [rollup](https://github.com/rollup/rollup) from 4.43.0 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.43.0...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-28 04:30:36 +00:00