Commit Graph
275 Commits
Author SHA1 Message Date
Hendrik Belitz a381e4e213 Fixed limiting errors 2026-01-20 17:38:40 +01:00
Hendrik Belitz 19c3ee519c Fixes after notification changes and updates. 2026-01-20 17:26:25 +01:00
Hendrik Belitz be05543415 Merge branch 'main' of github.com:open-reception/appointment-booking-software into 148-provide-apis-for-cancelling-appointments-staff-and-client-wise 2026-01-20 17:08:53 +01:00
Karl Ludwig Weise 9d34332921 Improved Login default state 2026-01-19 21:04:14 +01:00
Karl Ludwig Weise e570ecef51 Add confirm to prime user for PRF output retrieval 2026-01-19 20:51:18 +01:00
Karl Ludwig Weise 9e4094702d Only try to initStaffCrypto when user is regular staff member 2026-01-19 20:07:28 +01:00
Karl Ludwig Weise c2904659e4 Remove global admin from staff ui 2026-01-19 20:02:40 +01:00
Karl Ludwig Weise 1df02cb9f5 Minimize cases where the access_token is still set, but invalid 2026-01-19 16:40:20 +01:00
Karl Ludwig Weise 3bdf663f71 Improved hover state of channels and agents during booking 2026-01-16 16:58:51 +01:00
Karl Ludwig Weise 32fe5c7e42 Fix reloads during onboarding 2026-01-16 16:56:18 +01:00
Karl Ludwig Weise 76838eba29 Fix: Legal links in settings are optional 2026-01-16 16:45:25 +01:00
Karl Ludwig Weise fd7cfe00df Fix tenant database migrations 2026-01-16 16:20:32 +01:00
Karl Ludwig Weise eb47814395 Redact user and password from databaseUrl logs 2026-01-16 16:03:23 +01:00
Karl Ludwig Weise 95d0180c0b Added link to home from login 2026-01-16 15:47:49 +01:00
Karl Ludwig Weise ded98597fc Disable book appointment button, when in progress 2026-01-16 15:47:40 +01:00
Karl Ludwig Weise 1d83f8678b Set english as default language 2026-01-16 15:36:12 +01:00
Karl Ludwig Weise 0c0ef46989 Improve decrypting error message 2026-01-16 15:35:56 +01:00
Karl Ludwig Weise 439d1d198f Show proper label on settings form 2026-01-16 15:35:29 +01:00
Karl Ludwig Weise 65a9807ad8 Fix: Show language switch again on dashboard 2026-01-16 15:34:45 +01:00
Karl Ludwig Weise 86a3f27bf6 Fix pin throttle check 2026-01-16 13:39:42 +01:00
Karl Ludwig WeiseandGitHub a72b596084 Merge pull request #177 from open-reception/dependabot/npm_and_yarn/devalue-5.6.2
Bump devalue from 5.3.2 to 5.6.2
2026-01-16 13:01:46 +01:00
dependabot[bot]andGitHub 34f5f3c3c3 Bump devalue from 5.3.2 to 5.6.2
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.3.2 to 5.6.2.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/devalue/compare/v5.3.2...v5.6.2)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-15 18:18:49 +00:00
fb3b880204 142 provide logic and apis to use more than one passkey with a staff member (#163)
* Basic implementation

* Syntax fixes

* Implemented PRF for passkey administration. Updated docs, renamed confusing endpoints.

* Update src/routes/api/auth/passkeys/[passkeyId]/crypto/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Removed unused param

* Merge fixes, formatting fixes, database migrations

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-13 18:35:42 +01:00
c552945643 141 provide apis for pin reset (#162)
* Simplified locals.user
Checked routes for accessibilty

* Fixed tests

* Fixed import errors

* Fixed invite test

* PIN API implementation

* Tests for pin reset

* HOusekeeping

* Update src/routes/api/tenants/[id]/clients/pin-reset/request/+server.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fixes for id and housekeeping

* DB migrations

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-13 18:17:42 +01:00
a6707ef081 151 bare minimum notification system (#161)
* Extension of tenant schema

* Notification service

* Notification endpoints

* Format errors

* Update src/lib/server/db/tenant-schema.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update src/lib/server/services/notification-service.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Explicit where clause in delete notification

* Update tenant-migrations/0008_neat_swarm.sql

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Sort notifivcations by creation date. Do not explicitly check for existance in mark as read.

* Fixed tests

* No longer store texts in notifications

* Single source of truth for notification types

* Formatting

* Fixed linting errors

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-13 18:05:32 +01:00
8c0343b1ec Feat/email renderer (#172)
* Added poc of new email renderer

* Completed email renderer poc for appointment confirmation

* Changed phone description in add-personal-data-form

* Added used email types to new email system

* Switched email templates to the new template engine.

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
Co-authored-by: Hendrik Belitz <hendrik@innovation-through-understanding.de>
2026-01-12 10:03:22 +01:00
Karl Ludwig Weise efdae16249 Fixed db:drop script for local development 2026-01-07 10:28:23 +01:00
Hendrik Belitz ca68df8d45 Copilot review fixes 2026-01-04 18:34:57 +01:00
Hendrik Belitz c71353de43 Delete appointment by client 2026-01-04 18:06:46 +01:00
Hendrik Belitz b923c3b7c7 My Appointments endpoint for clients 2026-01-04 17:48:15 +01:00
Hendrik Belitz 9aaef3f8aa Deletion endpoint for staff 2026-01-04 17:29:07 +01:00
Hendrik Belitz e89642db82 Delete appointment by staff 2026-01-04 17:28:17 +01:00
Hendrik Belitz a18afae4cc Appointment cancellation notification texts 2026-01-04 17:27:38 +01:00
Hendrik Belitz c954535b43 Mail templates appointment cancellation 2026-01-04 17:24:55 +01:00
Hendrik Belitz e791889828 Fixed tests 2026-01-03 14:35:28 +01:00
Hendrik Belitz 0a55e9de88 Merge branch '151-bare-minimum-notification-system' of github.com:open-reception/appointment-booking-software into 151-bare-minimum-notification-system 2026-01-03 14:31:25 +01:00
Hendrik Belitz 95010b23fd Sort notifivcations by creation date. Do not explicitly check for existance in mark as read. 2026-01-03 14:31:20 +01:00
e0a78f5208 Update tenant-migrations/0008_neat_swarm.sql
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-03 14:30:41 +01:00
Hendrik Belitz 8c13f74560 Explicit where clause in delete notification 2026-01-03 14:27:32 +01:00
08bc747233 Update src/lib/server/services/notification-service.ts
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-03 14:23:54 +01:00
c1e70b825e Update src/lib/server/db/tenant-schema.ts
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-03 14:22:24 +01:00
Hendrik Belitz 5980a39566 Format errors 2026-01-03 14:08:31 +01:00
Hendrik Belitz af9c43a3f6 Notification endpoints 2026-01-03 14:06:47 +01:00
Hendrik Belitz ccb1868d86 Notification service 2026-01-03 14:06:24 +01:00
Hendrik Belitz a953a2f8ef Extension of tenant schema 2026-01-03 14:06:14 +01:00
HendrikGitHubhbelcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Copilot
b81706a8d9 Security hotfix prf (#146)
* Use PRF extension for deterministic Zero Knowledge Shards

* Webauthn validation lib

* Use attestation and validate passkeys

* Use attestation objects and cose-format keys in frontend. Added additional checks so that we don't create orphaned users when validation fails.

* Fixed type check error

* Fix PRF salt documentation to match implementation (#147)

* Initial plan

* Fix PRF salt documentation to match implementation

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Use dev instead of node env

* Migration fixes

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>
2026-01-02 15:08:23 +01:00
CopilotGitHubhbelcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Hendrik Belitz
337fc2e70b Add throttling to challenge APIs for brute force protection (#145)
* Initial plan

* Add throttling implementation for challenge APIs

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Add tests for throttling and fix linting issues

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Address code review feedback - improve error handling and documentation

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Consolidate throttle storage to central DB per review feedback

Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>

* Fixed errors in challenge-throlle.

* Add throttling to frontend.

* incorporated Reviewer comments

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hbel <7416029+hbel@users.noreply.github.com>
Co-authored-by: Hendrik Belitz <hendrik@innovation-through-understanding.de>
2026-01-02 13:14:40 +01:00
HendrikandGitHub 1959115d70 127 add checkpermission everywhere where needed (#140)
* Simplified locals.user
Checked routes for accessibilty

* Fixed tests

* Fixed import errors

* Fixed invite test
2025-12-16 11:25:19 +01:00
Hendrik Belitz 145e931f38 Do not commit audits 2025-12-14 14:39:36 +01:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
98f6a4e9ba Bump validator from 13.15.20 to 13.15.23 (#139)
Bumps [validator](https://github.com/validatorjs/validator.js) from 13.15.20 to 13.15.23.
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/validatorjs/validator.js/compare/13.15.20...13.15.23)

---
updated-dependencies:
- dependency-name: validator
  dependency-version: 13.15.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-13 16:59:47 +01:00