Commit Graph

Select branches

Hide Pull Requests

claude/fix-security-flaws-vZgBB

master

#1

Mono Color

• 35ddad365c ✨ **Add Latvian translations and enhance localization support** - ➕ Added Latvian (lv) JSON translations and validation/password localization files. - 🛠️ Updated lang-country config to include lv-LV and centralized language definitions. - 🌐 Extended sidebar and navigation with new translatable strings. - ➕ Introduced 72px width customization for the sidebar layout. - ✅ Improved timezone mapping in Nostr publishing commands (added Europe/Riga). - 🛠️ Refactored language selector to dynamically source available languages from the config. master HolgerHatGarKeineNode 2026-05-20 11:45:50 +02:00
• e3f8c4c232 🐛 **Handle MissingFileUploadsTrait exceptions gracefully** - ✅ Added detection logic for MissingFileUploadsTraitException to prevent 500 errors. - 🛠️ Updated exception handling to return a 400 response for these scenarios. - 🔇 Suppressed logging of MissingFileUploadsTraitException to reduce noise. - ✅ Added tests to verify 400 responses and absence of log entries. HolgerHatGarKeineNode 2026-05-20 10:54:12 +02:00
• 03aacdb8ff 🐛 **Handle stale compiled view exceptions gracefully** - ✅ Added detection logic to identify missing compiled view files and avoid 500 errors. - 🛠️ Updated exception handling to return 503 with Retry-After for stale compiled views. - 🔇 Prevented logging of stale compiled view exceptions to reduce noise. - ✅ Added tests to validate 503 responses, Retry-After headers, and logging suppression. HolgerHatGarKeineNode 2026-05-20 00:42:13 +02:00
• 8a3f90fc3d 🐛 **Handle stale Livewire asset exceptions gracefully** - ✅ Added detection logic for stale Livewire asset patterns to avoid 500 errors. - 🛠️ Updated exception handling to return 404 for stale asset requests. - 🔇 Prevented logging of stale asset exceptions to avoid unnecessary noise. - ✅ Added tests to verify 404 responses and absence of log entries for stale asset scenarios. HolgerHatGarKeineNode 2026-05-20 00:31:02 +02:00
• 1f574ae5c8 🔧 **Add .codegraph config & update dependencies** - ➕ Added .codegraph/config.json for file inclusion/exclusion in analytics. - ⬆️ Bumped versions of guzzlehttp, laravel/framework, laravel/horizon, shiki, nostr-tools, and other dependencies in composer.lock and yarn.lock. - 🖼️ Enhanced file upload validation and preview support by including .avif MIME type in livewire components and configuration. - ✅ Added tests to ensure .avif is supported across file upload forms. HolgerHatGarKeineNode 2026-05-20 00:22:53 +02:00
• 308cd8a611 🚀 **Automate Meetup Activity Recalculation** - Introduced recalculateActivity method in Meetup model to centralize activity and event timestamp updates. - Added MeetupEventObserver to trigger activity recalculation on event save/delete. - Updated /meetups:update-activity command to leverage the new model method for cleanup. - Enhanced tests to cover various MeetupEvent scenarios affecting activity states. HolgerHatGarKeineNode 2026-05-17 18:13:37 +02:00
• 71a4898303 🎉 **Introduce meetup activity management** - Added is_active and last_event_at fields to meetups with migration. - Enhanced UI: Display Aktiv/Inaktiv badges and last event dates across dashboard, tables, and maps. - Introduced /meetups:update-activity command to manage activity flags and timestamps. - Validated latitude/longitude to prevent 0,0 inputs in city creation and updates. - Updated factories and tests to include meetup activity states (active, inactive). HolgerHatGarKeineNode 2026-05-17 17:57:16 +02:00
• bf9654de87 🔄 **Refactor and extend meetup membership-based authorization** - Updated authorizeAccess to restrict meetups.edit views and updates to users in "My-Meetups". - Attached creators to meetup_user pivot for default membership. - Adjusted related tests to validate membership-based edit permissions. HolgerHatGarKeineNode 2026-05-17 17:28:17 +02:00
• 9582880dbf 🔒 **Enforce authorization for meetup edit and update views** Added authorizeAccess method to restrict access to the meetup's creator, ensuring proper authorization during view rendering and updates. HolgerHatGarKeineNode 2026-05-17 15:12:49 +02:00
• 52276ee682 🗑️ **Remove redundant Laravel Boost guidelines** Deleted unused Laravel Boost guideline files (laravel-boost.md and laravel-boost.mdc) to clean up the repository. HolgerHatGarKeineNode 2026-05-17 15:08:01 +02:00
• 57b1b21c8f 🛠️ **Remove redundant authorization call in meetup update method** Streamlined the update method by eliminating the unnecessary authorizeAccess invocation. HolgerHatGarKeineNode 2026-05-05 10:00:31 +02:00
• 8b3005c63b 🛠️ **Remove unnecessary authorization logic from meetup edit view** Simplified component by eliminating redundant authorizeAccess method. HolgerHatGarKeineNode 2026-05-05 09:59:40 +02:00
• e7d1a949e8 ✨ **Nostr Login:** Improved user feedback and accessibility for login flow. BT 2026-05-04 00:43:50 +02:00
• 686be7e8f7 ✨ **Nostr Login:** Prevented session race conditions during login flow. BT 2026-05-04 00:36:00 +02:00
• dc723855df ✨ **Nostr Login:** Improved CSRF token handling during login flow. BT 2026-05-04 00:15:37 +02:00
• 2efc88a7f8 ✨ **Nostr Login:** Added server-side fallback for fresh challenges and improved client-side challenge resolution. BT 2026-05-03 23:53:46 +02:00
• bd7d39c1d7 ✨ **Nostr Login:** Enhanced error handling and removed unused auth-error event binding. BT 2026-05-03 23:41:49 +02:00
• 0f26bae9a6 ✨ **Nostr Login:** Improved error handling and compatibility for Nostr login flow. BT 2026-05-03 23:12:38 +02:00
• 81d310257b Merge pull request #1 from HolgerHatGarKeineNode/claude/fix-security-flaws-vZgBB The Ben 2026-05-03 18:15:53 +00:00
• a363c99453 🔥 **Cleanup & Tests:** Removed the obsolete auth.register component and its related route, feature tests, and browser tests. Disabled public registration and added tests to ensure /register returns a 404. Added new tests for service, lecturer, city, venue, and meetup CRUD flows. claude/fix-security-flaws-vZgBB BT 2026-05-03 20:09:07 +02:00
• a4cbb10604 🔥 **Cleanup:** Removed obsolete .junie guideline files and MCP configuration. ✨ **Tests:** Added helper function makeSignedNostrLoginEvent for generating NIP-42 signed login events. Updated related tests in Feature/Auth/NostrLoginTest.php to use this helper. 🚀 **Livewire Testing:** Enhanced authorization checks and added specific creator-based mounts for meetups.edit. Improved tests for MeetupMountTest and EditMeetupTest. 🎨 **Style:** Standardized request()->route() to lowercase country codes across multiple Blade templates for consistency. 🛠️ **Config:** Updated vite.config.js formatting for improved readability in ignored paths. BT 2026-05-03 18:36:14 +02:00
• cf330016a3 📚 **Docs & 🛠️ Config:** - **Docs:** Added new test enforcement guidelines to .junie/guidelines.md and AGENTS.md for improved code quality. - **Config:** Updated vite.config.js to ignore view cache changes and ensure faster reloads under server.watch. - **Dependencies:** Upgraded multiple Yarn dependencies including updates to @emnapi, @shikijs, @tailwindcss, and more for better performance and stability. BT 2026-05-03 15:21:01 +02:00
• d46c0161fe security: medium-severity fixes (proxies, ssrf, uploads, lnurl, github_data) Claude 2026-05-03 12:57:57 +00:00
• 9b81f6cd92 security: high-severity fixes (api throttle, fillable, idor, path, rel) Claude 2026-05-03 12:55:09 +00:00
• 90835f8b1f security: critical fixes (test route, edit authz, nostr signature, calendar IDOR) Claude 2026-05-03 12:51:10 +00:00
• 1f9e5309d2 ✨ **Middleware & Tests:** Improved exception handling for stale Livewire asset requests to return 404 instead of 500. Added feature tests to validate these scenarios. 🚀 BT 2026-05-03 12:15:36 +02:00
• b3a688cf2b ✨ **Tests & Nullable Fixes:** Added tests to ensure no crashes when nullable Livewire properties are explicitly set to null. Updated several Livewire components to handle nullable properties gracefully. 🚀 BT 2026-05-02 22:27:06 +01:00
• 172217d388 🛠️ **Migration:** Added hasTable check to meetup_user migration to prevent redundant table creation. BT 2026-05-02 22:06:35 +01:00
• 11821b0fae 🛠️ **Migration:** Added safety checks in add_reputation_field_on_user_table migration to prevent redundant schema alterations. BT 2026-05-02 22:02:25 +01:00
• 04e3e30fcf 🔥 **Cleanup:** Removed BookCase and OrangePill models, factories, migrations, and related references. Added tests for new service and meetup creation flows. Updated PHPUnit settings and browser-specific configurations. BT 2026-05-02 22:00:26 +01:00
• 63aed880e1 🔥 **Tests:** Removed obsolete feature tests for deleted components and endpoints across the project. BT 2026-05-02 19:59:16 +01:00
• ef3c06acb9 📚 **Docs:** Updated PHP version in guidelines and agent documentation + added --format agent to Laravel Pint commands BT 2026-05-02 19:22:58 +01:00
• 8736c20e0b 🛠️ **Composer:** Added dev scripts for local development with concurrently-powered tasks. BT 2026-05-02 19:21:57 +01:00
• 1f0bfba0d3 🎨 **Style:** Fixed indentation inconsistencies in meetup_user migration file. 🛠️ **Factory:** Created factories for TwitterAccount, EmailCampaign, EmailTexts, and BookCase. ✨ **Helper:** Added NostrHelper with methods for generating fake/mocked Nostr data. ⬆️ **Dependencies:** Updated multiple Composer dependencies including laravel/framework, astrotomic/laravel-translatable, and others to their latest versions. BT 2026-05-02 19:17:02 +01:00
• c81b168a11 Disable Nightwatch for routes (vibe-kanban 61177e47) vk 2026-02-22 23:02:40 +01:00
• 41d8b6268b UTC zu User Timezone (vibe-kanban 8b00e084) vk 2026-02-12 23:15:08 +01:00
• fc42d2d2e2 Teste alle Tests (vibe-kanban 978dffc8) vk 2026-02-11 21:33:08 +01:00
• 5f1de38cf2 🐘 Update .env.example to use PostgreSQL as the default database configuration HolgerHatGarKeineNode 2026-02-11 21:22:07 +01:00
• 4c1dd6f49a 🔧 Switch default cache store from database to redis in .env.example HolgerHatGarKeineNode 2026-02-11 21:20:24 +01:00
• 43e4ad696c ⚡ Add setup script and streamline linting commands in composer.json HolgerHatGarKeineNode 2026-02-11 21:12:34 +01:00
• 2f5ca24da0 🔥 Remove Laravel Sail, Docker, and related setup, migrate to simplified local development environment HolgerHatGarKeineNode 2026-02-11 21:10:09 +01:00
• bb84117fd1 🛠️ Remove deprecated Forge deployment workflow, add logic for fetching missing highscore names via Nostr, and update API routes with refined highscore endpoints. HolgerHatGarKeineNode 2026-02-02 12:36:00 +01:00
• 6dd04dee30 🏆 Add highscore feature with API endpoints, validations, and tests HolgerHatGarKeineNode 2026-02-02 12:27:01 +01:00
• 5f5a369ff9 🔥 Remove unused Symfony dependencies, update library versions, and add translations for improved UI consistency. HolgerHatGarKeineNode 2026-01-25 23:56:54 +01:00
• 32e327cd9c 🔥 Remove redundant PRD.md file, update media models with stricter MIME type validation, and refine media conversion settings. HolgerHatGarKeineNode 2026-01-25 23:54:44 +01:00
• 2f4113a3f3 🔥 Remove Docker setup for PHP 8.5 from docker/8.5, add detailed PRD for secure file uploads. HolgerHatGarKeineNode 2026-01-25 21:05:18 +01:00
• 753aa88d81 🔀 Update route name for legacy meetup calendar redirect to ics-meetup for consistency HolgerHatGarKeineNode 2026-01-25 15:35:30 +01:00
• 9d96fc82fd 🛠️ Add logic to handle authError type conversion in Livewire login component HolgerHatGarKeineNode 2026-01-18 13:14:20 +01:00
• 4175d6eade 🌐 Add missing German translations for event-related and UI terms in lang/en.json HolgerHatGarKeineNode 2026-01-17 21:28:47 +01:00
• ab69919949 🌐 Add missing English and Dutch translations for weekday, recurrence types, and event details HolgerHatGarKeineNode 2026-01-17 21:26:59 +01:00
• da1324adda 🗓️ Add MeetupEventFactory, implement rate limiting for calendar downloads, and enhance test coverage HolgerHatGarKeineNode 2026-01-17 21:18:55 +01:00
• d3acc365fd 🌐 Upgrade pestphp/pest to v4 and phpunit to v12, update translations, and document new Pest 4 testing features. HolgerHatGarKeineNode 2026-01-17 21:09:33 +01:00
• 3a79e6d3e2 🌐 Add missing translations for recurrence terms across supported languages HolgerHatGarKeineNode 2026-01-17 21:07:50 +01:00
• 7f92e77684 🔥 Remove unused tests, update factories, and introduce recurrence features HolgerHatGarKeineNode 2026-01-17 21:00:46 +01:00
• 74263a4581 🔒 Add manual hex validation for LNURL-Auth parameters k1 and key with improved test coverage HolgerHatGarKeineNode 2026-01-17 17:25:21 +01:00
• da43bcf81f 🛠️ Simplify Nostr login request by replacing Livewire entangle with direct $wire property access HolgerHatGarKeineNode 2026-01-17 17:15:19 +01:00
• b55c7da976 🛠️ Clean up Blade syntax and JS attribute bindings in login.blade.php for improved readability and consistency HolgerHatGarKeineNode 2026-01-17 17:10:26 +01:00
• 4c0d387692 🛠️ Refactor Blade views for Livewire component consistency, streamline login view, and improve key usage across components HolgerHatGarKeineNode 2026-01-17 17:07:15 +01:00
• eebe453f5a 🛠️ Replace Livewire\Volt\Component with Livewire\Component across all Blade views for consistency with updated Livewire conventions. HolgerHatGarKeineNode 2026-01-17 16:12:07 +01:00
• e5ea65fa77 🔑 Implement LNURL-Auth support with error handling, frontend polling, and test coverage HolgerHatGarKeineNode 2026-01-17 15:23:38 +01:00
• fb185d7226 ⚡ Add Livewire config, update composer dependencies, and enhance Blade layouts HolgerHatGarKeineNode 2026-01-17 14:12:41 +01:00
• 5e0cc9efaf 🛠️ Refactor Docker setup with new PHP 8.3 image, update supervisord configuration, and adjust Sail runtime paths. Add missing Spanish translations for UI settings. HolgerHatGarKeineNode 2026-01-17 13:42:41 +01:00
• 233402dace 🔧 Add .gitignore for static assets and update comment language in DomainMiddleware HolgerHatGarKeineNode 2025-12-14 20:53:09 +01:00
• a6ec5b7754 🎨 Adjust base layer styles and add custom styling for Leaflet popups and controls HolgerHatGarKeineNode 2025-12-11 20:05:10 +01:00
• b2e75d4d27 🖌️ Adjust login form layout and update Hungarian translations for consistency HolgerHatGarKeineNode 2025-12-11 19:45:32 +01:00
• 7b0feca298 🌍 Add German translations for Self-Hosted Services and related terms 🔄 Update community and service localization strings 📝 Include new UI labels and placeholders for service management features HolgerHatGarKeineNode 2025-12-11 16:58:49 +01:00
• 4c2d046d70 📍 Add latitude/longitude finder link in cities edit view HolgerHatGarKeineNode 2025-12-11 16:46:03 +01:00
• 1ccbd0a9ed 🔄 Refactor domain image helper to return attributes array 🖼️ Update SEO data to use domain attributes instead of single image 🌐 Adjust meetup model and blade component to use new domain attributes function HolgerHatGarKeineNode 2025-12-11 16:35:46 +01:00
• deeb1f066d 🌍 Update timezone fallback for Nostr publishing command to use Europe/Berlin HolgerHatGarKeineNode 2025-12-11 02:13:17 +01:00
• a8f1257948 🌍 Add Austria and Switzerland to German locale mapping in Nostr publishing command - Extend TZ_MAP and DOMAIN_MAP with 'at' and 'ch' entries pointing to Europe/Berlin and portal.einundzwanzig.space respectively. - Adjust locale setting logic to use 'de' for Austria and Switzerland, ensuring consistent language handling in Nostr publishing flows. HolgerHatGarKeineNode 2025-12-10 03:46:14 +01:00
• 5d87391ac2 🗒️ Translate “community” labels to German in meetup forms and landing page - Update select options with localized names (Einundzwanzig Community, Allgemeine Bitcoin Community). - Wrap the heading text on the landing page with __() for proper translation. HolgerHatGarKeineNode 2025-12-09 23:52:54 +01:00
• 538ae5808a ⚙️ Make community a required field in meetup create/edit forms 🛠️ Add “Keine” placeholder option to community select ✏️ Translate community values (“bitcoin”, “einundzwanzig”) on landing page 🌍 Update German locale strings for community names HolgerHatGarKeineNode 2025-12-09 23:47:58 +01:00
• 52c05e6d47 ⚙️ Preserve user language preference in DomainMiddleware and adjust locale‑setting logic to avoid overwriting existing session values while still configuring domain‑specific app settings. HolgerHatGarKeineNode 2025-12-09 23:41:44 +01:00
• c6c524a876 ⚙️ Update PublishUnpublishedItems to run hourly and only publish MeetupEvents starting within the next 7 days. HolgerHatGarKeineNode 2025-12-09 23:02:43 +01:00
• d263eaf92d 🛠️ Add German portal domain and refactor URL handling for Nostr publishing - Introduce portal.einundzwanzig.space with locale settings in DomainMiddleware. - Replace verbose if‑chain in NostrTrait::getUrl() with a concise match expression. - Add DOMAIN_MAP constant to PublishUnpublishedItems and force URL generation to use the correct domain per country. - Update command flow: set domain before configuring timezone/locale. HolgerHatGarKeineNode 2025-12-09 22:45:26 +01:00
• 2a70537fcb 🛠️ Add Nostr publishing support with i18n templates and country‑specific configuration for domain handling and CLI command HolgerHatGarKeineNode 2025-12-09 22:35:54 +01:00
• b3ce0419f6 ⚙️ Refactor Vite config import and tidy Tailwind CSS setup ✂️ Consolidate defineConfig import syntax 🎨 Replace hard‑coded zinc palette with neutral variables 🧹 Remove redundant @source imports and obsolete style rules ✨ Add Alpine.js [x-cloak] helper with responsive variants 🚫 Clean up unused base layer selectors and leaflet styles HolgerHatGarKeineNode 2025-12-09 21:43:59 +01:00
• 9511bcdb11 ⚙️ Raise top‑meetup and top‑country limits from 10 → 15; add guard for empty sparkline data before rendering chart. HolgerHatGarKeineNode 2025-12-09 21:32:13 +01:00
• e18d79aa40 🚀 Refactor Laravel Boost MCP server configuration and enhance routing structure with new endpoints, redirects, and country-specific route groups HolgerHatGarKeineNode 2025-12-09 04:08:38 +01:00
• 312837e6fd 📋 Improve service links section: Add copy-to-clipboard functionality for IP and URLs, remove unnecessary whitespace-pre-wrap class, and display "Anonymous" when appropriate. HolgerHatGarKeineNode 2025-12-07 06:44:02 +01:00
• 14c1d9df15 📋 Add copy-to-clipboard feature for service URLs: Enhance user experience by allowing easy copying of clearnet, onion, I2P, and pkdns links. HolgerHatGarKeineNode 2025-12-07 06:28:06 +01:00
• c4cea2ae7a 🛠️ Add anon column to self-hosted services: Update views, models, forms, and migrations to support anonymous service creation and display HolgerHatGarKeineNode 2025-12-07 06:16:47 +01:00
• 9ee7ef1771 🌍 Add "IP Adresse" translations and update relevant views across supported languages HolgerHatGarKeineNode 2025-12-07 06:06:59 +01:00
• 980b833e80 🌐 Enhance service management: Add IP address field to forms, views, and database schema HolgerHatGarKeineNode 2025-12-07 06:04:52 +01:00
• eb7d792f1c 🌍 Add full translations for self-hosted service functionality across supported languages HolgerHatGarKeineNode 2025-12-07 05:24:01 +01:00
• 4e150518a4 🛠️ Remove deprecated LNbits enum and related references from SelfHostedServiceType HolgerHatGarKeineNode 2025-12-07 05:18:54 +01:00
• 0750852f51 🛠️ Enhance SEO: Add meta tags for services and meetups landing pages, including dynamic title, description, and image handling HolgerHatGarKeineNode 2025-12-07 05:14:52 +01:00
• 95de6e96c9 🛠️ Update dependencies: Add symfony/event-dispatcher v7.2 to composer.json and downgrade to v7.4.0 in composer.lock HolgerHatGarKeineNode 2025-12-07 04:02:33 +01:00
• 6da17adb41 🛠️ Update dependencies: Add symfony/mailer v7.2 to composer.json and update composer.lock HolgerHatGarKeineNode 2025-12-07 04:01:24 +01:00
• 17071c43e7 🛠️ Update dependencies: Downgrade symfony/string to v7.4.0 and add it to composer.json HolgerHatGarKeineNode 2025-12-07 04:00:15 +01:00
• 428b664440 🛠️ Update dependencies: Add symfony/translation v7.2 and downgrade symfony/translation to v7.4.0 in composer.lock HolgerHatGarKeineNode 2025-12-07 03:59:08 +01:00
• 2c5c4d4ac9 🛠️ Update dependencies: Bump PHP to ^8.3 and downgrade symfony/clock to v7.4.0 HolgerHatGarKeineNode 2025-12-07 03:57:19 +01:00
• 22910553e4 🛠️ Enhance service index: Add link tooltips, improve button spacing, and clean up component formatting HolgerHatGarKeineNode 2025-12-07 03:51:40 +01:00
• 6d8436c8a5 🛠️ Add delete functionality for services with confirmation modal and extend creator name display limit to 20 characters HolgerHatGarKeineNode 2025-12-07 01:11:57 +01:00
• 14f717a2b9 🛠️ Refactor service components: Add dynamic type filters, restructure landing page UI, and introduce ServiceForm for improved form handling and validations HolgerHatGarKeineNode 2025-12-07 01:06:20 +01:00
• aef4deedd6 🛠️ Add services index and landing page components with dynamic links and new Polish translations HolgerHatGarKeineNode 2025-12-07 00:01:15 +01:00
• bc700a1f2c 🖋️ Update dashboard Meetup list with responsive layout and improved button styles HolgerHatGarKeineNode 2025-12-06 02:24:25 +01:00
• ee6ca08aa3 🛠️ Add event deletion functionality with confirmation modal to meetups landing page HolgerHatGarKeineNode 2025-12-06 02:21:18 +01:00
• 0662a614b9 🛠️ Add recurring events creation logic and translations for supported languages HolgerHatGarKeineNode 2025-12-06 00:14:08 +01:00
• d0d19663aa 🛠️ Ensure meetup names are converted to ASCII before sanitizing in ExtractLogos command HolgerHatGarKeineNode 2025-12-05 23:27:12 +01:00