Claude 90835f8b1f security: critical fixes (test route, edit authz, nostr signature, calendar IDOR)
- Remove unauthenticated /test route that dispatched FetchNostrProfileJob
  for a hardcoded user (routes/web.php).
- Enforce created_by ownership check in meetup and lecturer Livewire edit
  components; mirror the existing services/edit pattern.
- Replace blind-trust nostrLoggedIn handler with NIP-42-style signed event
  verification: server-issued challenge stored in session, client signs a
  kind:22242 event, server verifies signature via swentel/nostr-php and
  derives npub. Challenge is single-use with 5-minute TTL.
- Validate the ?my[] parameter on the calendar download endpoint as an
  array of integers and intersect with the authenticated user's meetups.
2026-05-03 12:51:10 +00:00
2025-11-21 04:28:08 +01:00
2025-11-21 04:28:08 +01:00
2025-11-21 04:28:08 +01:00
2025-11-21 04:28:08 +01:00
2025-11-21 04:28:08 +01:00

Laravel Forge Site Deployment Status

Hosted:

Host your national domain?

To add your national domain, you need to create a CNAME record pointing to portal.einundzwanzig.space.

Here's how:

  1. Add a subdomain like portal.yourdomain.tld
  2. Create a CNAME record pointing to portal.einundzwanzig.space

DNS provider CNAME settings:

Type: CNAME Name/Host/Alias: portal Target/Value/Destination: portal.einundzwanzig.space

After setting up your CNAME, please notify the repository owner to refresh SSL certificates to include your domain.

Contributing and Proposals

https://gitworkshop.dev

Development

Prerequisites

  • PHP 8.3+
  • PostgreSQL (running locally or as a container)
  • Redis (running locally or as a container)
  • Node.js + Yarn

Installation

cp .env.example .env

composer install (you need a valid Flux Pro license or send a message to Nostr - The Ben)

Migrate and seed the database

php artisan migrate:fresh --seed

php artisan storage:link

Install node dependencies

yarn

Start development environment

composer run dev

This starts the PHP dev server, queue worker, Pail log viewer, and Vite concurrently.

Update dependencies

yarn

Security Vulnerabilities

If you discover a security vulnerability within this project, please go to https://gitworkshop.dev. All security vulnerabilities will be promptly addressed.

License

Open-sourced software licensed under the MIT license.

Languages
PHP 58.4%
Blade 40.5%
JavaScript 0.8%
CSS 0.3%