Commit Graph
454 Commits
Author SHA1 Message Date
github-actions[bot]andKarl Ludwig Weise fe2af7fa17 chore: bump version to v1.0.4 2026-05-12 10:56:20 +02:00
Hendrik Belitz 3ec5076007 Fixed type error and tests 2026-05-11 12:38:44 +02:00
Hendrik Belitz 4522a44c00 Adding appointments to an existing tunnel is only allowed for the tunnel's client. 2026-05-11 12:35:43 +02:00
Hendrik Belitz f47320dd8a Fix schedule endpoint so it only returns public channels 2026-05-11 11:17:51 +02:00
Hendrik Belitz 518717b325 Merge branch 'main' of https://github.com/open-reception/appointment-booking-software-ghsa-j9rw-x2wv-h5rj v1.0.4 2026-05-08 16:04:13 +02:00
Hendrik BelitzandCopilot 828b5297dc Boostrapping of user registration. Keypass error fixes.
Co-authored-by: Copilot <copilot@github.com>
2026-05-08 15:40:21 +02:00
github-actions[bot] 1565070619 chore: bump version to v1.0.3 2026-05-08 12:22:26 +00:00
Karl Ludwig Weise a9a6cb75b0 Fix tests v1.0.3 2026-05-08 13:45:02 +02:00
Hendrik BelitzandCopilot 78dfd9317a Mitigate account takeover in user registration process
Co-authored-by: Copilot <copilot@github.com>
2026-05-08 10:47:08 +02:00
Karl Ludwig Weise 79b482166d Prevent saving protected settings to tenant 2026-05-07 17:44:46 +02:00
Karl Ludwig Weise b19d87eb22 Prevent data leak from PUT request to /api/tenant/id 2026-05-06 21:26:44 +02:00
github-actions[bot] 2fe15ac599 chore: bump version to v1.0.2 2026-05-05 13:52:15 +00:00
Karl Ludwig Weise b283dbb670 Added throttle for passphrase login v1.0.2 2026-05-05 15:27:40 +02:00
Karl Ludwig Weise f833dbf500 Remove auth cookie only after logout call to api 2026-05-05 11:59:55 +02:00
Karl Ludwig Weise ad9e49e3cf Prevent data leak from get tenant endpoint 2026-05-05 11:53:52 +02:00
Karl Ludwig Weise 98a107d4b4 Prevent admins from entering malicious javascript into link settings 2026-05-05 11:31:36 +02:00
Karl Ludwig Weise 5f61a2116d Validate against database when registering 2026-05-05 11:01:49 +02:00
Karl Ludwig Weise 36104d21ee Sanitize and limit fe log messages 2026-05-05 11:01:49 +02:00
Karl Ludwig Weise 8525d35a41 Fix tenant admin role escalation to global admin 2026-05-05 11:01:49 +02:00
github-actions[bot] 2630cc9b8e chore: bump version to v1.0.1 2026-05-05 02:21:12 +00:00
Karl Ludwig Weise 222408af6f Fix malicious global admin account creation using setup route again v1.0.1 2026-05-05 03:58:03 +02:00
Karl Ludwig Weise 2a8477cd0b Added docs and deployment link to readme file 2026-05-04 10:05:07 +02:00
github-actions[bot] e7562b6b34 chore: bump version to v1.0.0 2026-05-03 08:36:35 +00:00
github-actions[bot] 1fb16689b6 chore: bump version to v1.0.0-rc2 v1.0.0 2026-04-30 14:22:30 +00:00
Karl Ludwig Weise 1d167faee6 Disable account link in sidebar nav v1.0.0-rc2 2026-04-30 15:38:31 +02:00
Karl Ludwig Weise 8bf9956c89 Fix version no being included in build 2026-04-30 15:36:01 +02:00
github-actions[bot] 2e400f6062 chore: bump version to v1.0.0-rc 2026-04-30 10:06:14 +00:00
Karl Ludwig Weise bcdf4d170b Fix version bump to be pushed to main v1.0.0-rc 2026-04-30 11:31:49 +02:00
Karl Ludwig Weise 37c02b64cf Use recommended build and push approach to solve no such docker image issue 2026-04-30 10:43:48 +02:00
Karl Ludwig Weise 7907f5633a Fix ci build by adding safeguard to another JWT_SECRET usage 2026-04-30 09:53:54 +02:00
Karl Ludwig Weise 3e9199bc7a Fix build in ci 2026-04-30 09:35:57 +02:00
Karl Ludwig Weise c5e54da9d1 Fix check 2026-04-30 09:24:38 +02:00
Karl Ludwig Weise a55b3ded5a Fix ci build by making DATABASE_URL optional during build 2026-04-30 09:17:29 +02:00
Karl Ludwig Weise d57e54e5d0 Added required env to build step 2026-04-29 21:43:03 +02:00
Karl Ludwig Weise 8d60694a54 Do not build app during docker build 2026-04-29 21:33:23 +02:00
Karl Ludwig Weise 2b9a444936 Use official docker actions to build and push cross-platform images 2026-04-29 21:18:26 +02:00
Karl Ludwig Weise 35b6fa11e8 Release should only trigger one workflow run 2026-04-29 20:39:17 +02:00
Karl Ludwig Weise 71de820cb2 Updated checkout and setup-node github actions 2026-04-29 20:35:41 +02:00
Karl Ludwig Weise 211fbd3830 Adjusted release workflow for release using github ui 2026-04-29 20:28:32 +02:00
Karl Ludwig Weise bc0f2eb10d Fix main deploy workflow 2026-04-29 20:25:39 +02:00
Karl Ludwig Weise 3362d7b25f v0.0.2 2026-04-29 20:13:13 +02:00
Karl Ludwig Weise 9895b57d73 E-Mail name contains tenant longName + fix user invite to use selected language 2026-04-28 21:00:46 +02:00
Karl Ludwig Weise 7a955b3a70 Fix: Granting staff access to appointments 2026-04-28 20:54:47 +02:00
Karl Ludwig Weise a8481a96ba Fix baseUrl for staff invite emails 2026-04-24 22:44:28 +02:00
Karl Ludwig Weise 758b505686 Remove possible auth cookie before confirmation would fail because of it 2026-04-24 22:21:37 +02:00
Karl Ludwig Weise 95702fd73c Hide debugging utc timestamps on slots again 2026-04-23 17:25:48 +02:00
Karl Ludwig WeiseandGitHub ad01d07365 Merge pull request #245 from open-reception/fix/headers
Move headers and fix timezone and daylight-saving issues
2026-04-23 16:50:03 +02:00
Karl Ludwig Weise c74a8dfb37 Fix absences and appointments to block proper slots 2026-04-23 16:49:12 +02:00
Karl Ludwig Weise c322b557c0 Merge remote-tracking branch 'origin/main' into fix/headers 2026-04-20 09:50:21 +02:00
Karl Ludwig WeiseandGitHub 327346de98 Merge pull request #252 from open-reception/feat/package-updates
Feat/package updates
2026-04-20 09:39:51 +02:00