Commit Graph
381 Commits
Author SHA1 Message Date
Karl Ludwig Weise d04d87ed2e Fix check 2026-04-20 09:37:22 +02:00
Karl Ludwig Weise f6d50864fb Only show onboarding notifications, when tenant is selected 2026-04-20 09:29:35 +02:00
Karl Ludwig Weise 374fe19121 Only get notifications/staff, if tenant is selected 2026-04-20 09:22:48 +02:00
Karl Ludwig Weise 093325dba1 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/sveltejs/kit-2.57.1' into feat/package-updates 2026-04-20 09:08:51 +02:00
Karl Ludwig Weise 26cfdfe60d Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/nodemailer-8.0.5' into feat/package-updates 2026-04-20 09:08:27 +02:00
Karl Ludwig Weise b8d51b4c0c Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/drizzle-orm-0.45.2' into feat/package-updates 2026-04-20 09:08:17 +02:00
Karl Ludwig Weise 798af99f21 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/vite-6.4.2' into feat/package-updates 2026-04-20 09:08:09 +02:00
Karl Ludwig Weise 020afbfe53 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/picomatch-2.3.2' into feat/package-updates 2026-04-20 09:07:55 +02:00
Karl Ludwig Weise c9c9cdc290 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/flatted-3.4.2' into feat/package-updates 2026-04-20 09:07:44 +02:00
Karl Ludwig Weise 99f55f1f0a Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/effect-3.21.0' into feat/package-updates 2026-04-20 09:07:36 +02:00
Karl Ludwig Weise 99400f6497 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-2e149f5a3a' into feat/package-updates 2026-04-20 09:07:25 +02:00
Karl Ludwig Weise 06245ec224 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/devalue-5.6.4' into feat/package-updates 2026-04-20 09:07:14 +02:00
Karl Ludwig Weise cb7764b459 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-770cfcd984' into feat/package-updates 2026-04-20 09:06:30 +02:00
Karl Ludwig Weise 1e9dd1a65e Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/svelte-5.53.6' into feat/package-updates 2026-04-20 09:06:19 +02:00
Karl Ludwig Weise a41646ef92 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/rollup-4.59.0' into feat/package-updates 2026-04-20 09:06:09 +02:00
dependabot[bot]andGitHub cab993b9c7 Bump @sveltejs/kit from 2.50.0 to 2.57.1
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.50.0 to 2.57.1.
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.57.1/packages/kit)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.57.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 19:15:46 +00:00
dependabot[bot]andGitHub 3de31341bd Bump nodemailer from 7.0.11 to 8.0.5
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 7.0.11 to 8.0.5.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v7.0.11...v8.0.5)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 8.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 23:37:06 +00:00
dependabot[bot]andGitHub bbac0eda91 Bump drizzle-orm from 0.44.2 to 0.45.2
Bumps [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) from 0.44.2 to 0.45.2.
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/0.44.2...0.45.2)

---
updated-dependencies:
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 06:59:34 +00:00
a97d64f0e3 Secure staff public keys (#231)
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests

* Obfuscate error output

* Create access tokens for clients from the challenge.

* Bootstrap tokens for new clients. Use jti on client tokens.
Secure my-appointments with token.

* If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted)

* Lint and check fixes

* Format fixes

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
2026-04-07 18:34:17 +02:00
dependabot[bot]andGitHub 8efdc4f150 Bump vite from 6.4.1 to 6.4.2
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.1 to 6.4.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-07 04:47:35 +00:00
Karl Ludwig Weise d2b3e544bb Added --ignore-scripts to all npm ci installs 2026-03-31 17:26:56 +02:00
dependabot[bot]andGitHub 7759510b21 Bump picomatch from 2.3.1 to 2.3.2
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 03:55:03 +00:00
Karl Ludwig Weise a57b80281d Removed trivy vunerability scanner due to their security issues 2026-03-25 10:36:49 +01:00
Karl Ludwig Weise 4d125dc59a Fix calendar appointment positions coming in utc 2026-03-24 20:23:51 +01:00
Karl Ludwig Weise cc4bc76f53 Added translation fixes 2026-03-24 20:23:51 +01:00
Karl Ludwig Weise cc174eec68 Fix pausing/activating channels 2026-03-24 20:23:51 +01:00
HendrikandGitHub 5ddb05d9f0 Update Trivy action version in release workflow
Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
2026-03-23 09:46:08 +01:00
dependabot[bot]andGitHub c6065a7a12 Bump flatted from 3.3.3 to 3.4.2
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-21 15:00:37 +00:00
dependabot[bot]andGitHub 9b652c69a3 Bump effect from 3.19.14 to 3.21.0
Bumps [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) from 3.19.14 to 3.21.0.
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@3.21.0/packages/effect)

---
updated-dependencies:
- dependency-name: effect
  dependency-version: 3.21.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-20 21:58:10 +00:00
dependabot[bot]andGitHub fec32c0dd4 Bump kysely and @inlang/paraglide-js
Bumps [kysely](https://github.com/kysely-org/kysely) to 0.28.14 and updates ancestor dependency [@inlang/paraglide-js](https://github.com/opral/paraglide-js). These dependencies need to be updated together.


Updates `kysely` from 0.27.6 to 0.28.14
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](https://github.com/kysely-org/kysely/compare/0.27.6...v0.28.14)

Updates `@inlang/paraglide-js` from 2.9.1 to 2.15.0
- [Changelog](https://github.com/opral/paraglide-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opral/paraglide-js/commits)

---
updated-dependencies:
- dependency-name: kysely
  dependency-version: 0.28.14
  dependency-type: indirect
- dependency-name: "@inlang/paraglide-js"
  dependency-version: 2.15.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-20 21:39:44 +00:00
HendrikandKarl Ludwig Weise 48eed20c17 Update issue templates 2026-03-20 14:27:08 +01:00
Hendrik Belitz 77b81dc82c Format fixes 2026-03-16 11:37:43 +01:00
Hendrik Belitz 37a02c84c9 Lint and check fixes 2026-03-16 11:37:33 +01:00
Hendrik Belitz bda0862bcf If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted) 2026-03-16 10:46:08 +01:00
Karl Ludwig Weise 0bd45cf342 Merge remote-tracking branch 'origin/main' into secure-staff-public-keys 2026-03-16 09:27:17 +01:00
HendrikandGitHub 4622ad714c Obfuscate error data from public endpoints (#230)
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests

* Obfuscate error output
2026-03-12 17:08:28 +01:00
dependabot[bot]andGitHub 1b5b81ce36 Bump devalue from 5.6.2 to 5.6.4
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.2 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.2...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-12 15:33:14 +00:00
Hendrik Belitz 17d4846b8d Bootstrap tokens for new clients. Use jti on client tokens.
Secure my-appointments with token.
2026-03-11 13:28:07 +01:00
Hendrik Belitz b4ca6680ea Create access tokens for clients from the challenge. 2026-03-11 12:35:08 +01:00
Hendrik Belitz 0da63b1d2c Obfuscate error output 2026-03-11 12:20:33 +01:00
010855efa8 Added deployment docs (#228)
* Added deployment docs

* Fix lint

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
2026-03-11 11:58:59 +01:00
HendrikandGitHub c710142295 Do not apply shortname for system tenant generateBaseUrl (#223)
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain

* Use domain instead of shortName for tenant domain

* Fixed tests
2026-03-11 06:20:22 +01:00
Hendrik Belitz 294581aa10 Fixed tests 2026-03-10 21:56:38 +01:00
Hendrik Belitz 1b883c7d06 Use domain instead of shortName for tenant domain 2026-03-10 21:51:30 +01:00
HendrikandGitHub bd6c10e160 224 remove sensitive information from logs (#225)
* Logging adapted

* Fix log mocks

* Lint fixes
2026-03-10 19:08:03 +01:00
Karl Ludwig Weise fc385fc9cc Only show empty slots in the future 2026-03-10 19:07:08 +01:00
Karl Ludwig Weise 8bfd80aa26 Use UTC times for slot templates 2026-03-10 10:55:27 +01:00
Karl Ludwig Weise fe67e23dec Set refresh interval to 5 minutes 2026-03-10 09:10:33 +01:00
Karl Ludwig Weise 9e0dc6b870 Fix appointment positions after change to UTC 2026-03-09 10:07:00 +01:00
09ffc21523 Added flow for staff members to create appointments (#204)
* Added flow for staff members to create appointments

* Add calendar page title

* Remove security check npm audit for pull-requests

* Fix docker build to be multi-platform

* Attempt to fix tests

* Remove obsolete test

* Refresh session every 3 minutes

---------

Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de>
2026-03-06 10:22:28 +01:00