 Karl Ludwig Weise
|
dfabcc05fc
|
Send notifications for appointment requests via email
|
2026-05-29 22:20:58 +02:00 |
|
|
Karl Ludwig Weise
|
0a0a6dca95
|
Claiming an account is now a manual step to not trigger it by previews from email apps
|
2026-05-29 17:32:38 +02:00 |
|
|
Karl Ludwig Weise
|
3ea5455f15
|
Improve usability for adding and editing absences
|
2026-05-29 16:44:15 +02:00 |
|
|
Karl Ludwig Weise
|
bf52d45d73
|
Fix full day absences to span the full day
|
2026-05-29 16:44:15 +02:00 |
|
|
Karl Ludwig Weise
|
f39d6b388c
|
Fix: Use full hostname to check for proper login domain
|
2026-05-27 21:39:04 +02:00 |
|
|
Karl Ludwig Weise
|
2c4abf4c40
|
Fix: Tenant switcher shows proper domain
|
2026-05-27 21:01:55 +02:00 |
|
|
Hendrik Belitz
|
a16573a94c
|
Fix domain name for tenant (this is no longer the shortName)
|
2026-05-27 17:58:31 +02:00 |
|
|
Karl Ludwig Weise
|
74630292f8
|
Fix: Custom domains don't have to match shortName
|
2026-05-27 11:54:15 +02:00 |
|
|
Hendrik Belitz
|
5e77fd1df4
|
Only delete invites on tenant where staff was deleted
|
2026-05-16 19:18:25 +02:00 |
|
|
Hendrik Belitz
|
e9c96c049e
|
Changed difficulty from 4 to 5.
|
2026-05-16 19:12:29 +02:00 |
|
|
Hendrik Belitz
|
461925a6e4
|
Added tenant-specific throttling for clients
|
2026-05-16 18:59:50 +02:00 |
|
|
Hendrik Belitz
|
a65c00bb8c
|
Removed deprecated and authorization-free appointment endpoint.
|
2026-05-16 18:44:09 +02:00 |
|
|
Hendrik Belitz
|
3ec5076007
|
Fixed type error and tests
|
2026-05-11 12:38:44 +02:00 |
|
|
Hendrik Belitz
|
4522a44c00
|
Adding appointments to an existing tunnel is only allowed for the tunnel's client.
|
2026-05-11 12:35:43 +02:00 |
|
|
Hendrik Belitz
|
f47320dd8a
|
Fix schedule endpoint so it only returns public channels
|
2026-05-11 11:17:51 +02:00 |
|
|
Hendrik Belitz
|
518717b325
|
Merge branch 'main' of https://github.com/open-reception/appointment-booking-software-ghsa-j9rw-x2wv-h5rj
|
2026-05-08 16:04:13 +02:00 |
|
|
Hendrik BelitzandCopilot
|
828b5297dc
|
Boostrapping of user registration. Keypass error fixes.
Co-authored-by: Copilot <copilot@github.com>
|
2026-05-08 15:40:21 +02:00 |
|
|
Karl Ludwig Weise
|
a9a6cb75b0
|
Fix tests
|
2026-05-08 13:45:02 +02:00 |
|
|
Hendrik BelitzandCopilot
|
78dfd9317a
|
Mitigate account takeover in user registration process
Co-authored-by: Copilot <copilot@github.com>
|
2026-05-08 10:47:08 +02:00 |
|
|
Karl Ludwig Weise
|
79b482166d
|
Prevent saving protected settings to tenant
|
2026-05-07 17:44:46 +02:00 |
|
|
Karl Ludwig Weise
|
b19d87eb22
|
Prevent data leak from PUT request to /api/tenant/id
|
2026-05-06 21:26:44 +02:00 |
|
|
Karl Ludwig Weise
|
b283dbb670
|
Added throttle for passphrase login
|
2026-05-05 15:27:40 +02:00 |
|
|
Karl Ludwig Weise
|
f833dbf500
|
Remove auth cookie only after logout call to api
|
2026-05-05 11:59:55 +02:00 |
|
|
Karl Ludwig Weise
|
ad9e49e3cf
|
Prevent data leak from get tenant endpoint
|
2026-05-05 11:53:52 +02:00 |
|
|
Karl Ludwig Weise
|
98a107d4b4
|
Prevent admins from entering malicious javascript into link settings
|
2026-05-05 11:31:36 +02:00 |
|
|
Karl Ludwig Weise
|
5f61a2116d
|
Validate against database when registering
|
2026-05-05 11:01:49 +02:00 |
|
|
Karl Ludwig Weise
|
36104d21ee
|
Sanitize and limit fe log messages
|
2026-05-05 11:01:49 +02:00 |
|
|
Karl Ludwig Weise
|
8525d35a41
|
Fix tenant admin role escalation to global admin
|
2026-05-05 11:01:49 +02:00 |
|
|
Karl Ludwig Weise
|
222408af6f
|
Fix malicious global admin account creation using setup route again
|
2026-05-05 03:58:03 +02:00 |
|
|
Karl Ludwig Weise
|
1d167faee6
|
Disable account link in sidebar nav
|
2026-04-30 15:38:31 +02:00 |
|
|
Karl Ludwig Weise
|
7907f5633a
|
Fix ci build by adding safeguard to another JWT_SECRET usage
|
2026-04-30 09:53:54 +02:00 |
|
|
Karl Ludwig Weise
|
3e9199bc7a
|
Fix build in ci
|
2026-04-30 09:35:57 +02:00 |
|
|
Karl Ludwig Weise
|
c5e54da9d1
|
Fix check
|
2026-04-30 09:24:38 +02:00 |
|
|
Karl Ludwig Weise
|
a55b3ded5a
|
Fix ci build by making DATABASE_URL optional during build
|
2026-04-30 09:17:29 +02:00 |
|
|
Karl Ludwig Weise
|
9895b57d73
|
E-Mail name contains tenant longName + fix user invite to use selected language
|
2026-04-28 21:00:46 +02:00 |
|
|
Karl Ludwig Weise
|
7a955b3a70
|
Fix: Granting staff access to appointments
|
2026-04-28 20:54:47 +02:00 |
|
|
Karl Ludwig Weise
|
a8481a96ba
|
Fix baseUrl for staff invite emails
|
2026-04-24 22:44:28 +02:00 |
|
|
Karl Ludwig Weise
|
758b505686
|
Remove possible auth cookie before confirmation would fail because of it
|
2026-04-24 22:21:37 +02:00 |
|
|
Karl Ludwig Weise
|
95702fd73c
|
Hide debugging utc timestamps on slots again
|
2026-04-23 17:25:48 +02:00 |
|
|
Karl Ludwig Weise
|
c74a8dfb37
|
Fix absences and appointments to block proper slots
|
2026-04-23 16:49:12 +02:00 |
|
|
Karl Ludwig Weise
|
c322b557c0
|
Merge remote-tracking branch 'origin/main' into fix/headers
|
2026-04-20 09:50:21 +02:00 |
|
|
Karl Ludwig Weise
|
d04d87ed2e
|
Fix check
|
2026-04-20 09:37:22 +02:00 |
|
|
Karl Ludwig Weise
|
f6d50864fb
|
Only show onboarding notifications, when tenant is selected
|
2026-04-20 09:29:35 +02:00 |
|
|
Karl Ludwig Weise
|
374fe19121
|
Only get notifications/staff, if tenant is selected
|
2026-04-20 09:22:48 +02:00 |
|
|
Karl Ludwig Weise
|
56a21a0469
|
Fix tests
|
2026-04-17 16:58:08 +02:00 |
|
|
Karl Ludwig Weise
|
701492e637
|
Fix check
|
2026-04-17 16:52:10 +02:00 |
|
|
Karl Ludwig Weise
|
39bb66ec78
|
Fix display times and appointment time when added using calendar
|
2026-04-17 16:39:48 +02:00 |
|
|
Karl Ludwig Weise
|
d51de0fbd0
|
Fix adding appointments in calendar
|
2026-04-16 16:59:58 +02:00 |
|
|
Hendrik Belitz
|
527e1f49e9
|
Save timezone, use timezone in appointment mails.
|
2026-04-08 15:43:27 +02:00 |
|
|
Karl Ludwig Weise
|
cd33d707ee
|
Merge remote-tracking branch 'origin/main' into fix/headers
|
2026-04-07 18:34:43 +02:00 |
|