Adriano Belisario
23114637ac
fix: sync reorder transaction + redirect unauthenticated users to wishlist
...
Build and Push Docker Image / build-and-push (push) Has been cancelled
- reorder route used async callback with better-sqlite3 (sync driver),
causing "Transaction function cannot return a promise" — converted to sync
- home page now redirects unauthenticated visitors to the wishlist slug
instead of getting stuck on the loading screen
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-03 21:02:10 +00:00
Adriano Belisario
cac2c223dd
feat: remove price and currency fields from frontend and backend
...
Build and Push Docker Image / build-and-push (push) Has been cancelled
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-03 20:51:49 +00:00
belisards
4e031a9d4d
feat(admin): claims dashboard listing all reservations
Build and Push Docker Image / build-and-push (push) Has been cancelled
2026-05-03 17:26:19 -03:00
belisards
31c912fc3d
revert: drop visitor CTA button and public visit endpoint
Build and Push Docker Image / build-and-push (push) Has been cancelled
2026-05-03 17:15:20 -03:00
belisards
17117ed7b2
feat(home): add Ver lista do Martin CTA, mints anonymous visitor guest
Build and Push Docker Image / build-and-push (push) Has been cancelled
2026-05-03 17:13:41 -03:00
belisards
c959cc8829
feat(ui): hide spoiler banner, anonymize claims, optional guest name, list wishlists on home, drop esgotados toggle
2026-05-03 16:53:48 -03:00
belisards
ce7731cebb
chore: remove password-lock; switch to ADMIN_TOKEN env; update docs
2026-05-03 16:34:41 -03:00
belisards
4f3017a02d
refactor(auth): replace JWT/password-lock with token guards
2026-05-03 16:31:00 -03:00
belisards
e518e28957
feat(api): tokens on all routes; items expose claims/claimedQuantity/remainingQuantity
2026-05-03 16:25:19 -03:00
belisards
844951c832
feat(claim): quantity-aware claims via item_claims; per-guest unclaim
2026-05-03 16:22:22 -03:00
belisards
32f9403bd8
feat(api): admin guests CRUD endpoints
2026-05-03 16:21:26 -03:00
belisards
7b2e2cc3c5
feat(auth): replace login/refresh/me with /api/auth/session
2026-05-03 16:20:37 -03:00
Michael T
ee884ccdf2
fix(api): use synchronous transaction for wishlist reorder
...
better-sqlite3 doesn't support async transactions. Removed async/await
and used synchronous .run() and .all() methods instead.
Fixes #38
2026-01-23 15:29:16 -05:00
Michael T
30c661a364
fix(auth): resolve cookie authentication failure over HTTP
...
Cookies were set with secure flag based solely on NODE_ENV, causing
401 errors when accessing over HTTP with NODE_ENV=production.
- Add COOKIE_SECURE env var for explicit control
- Auto-detect HTTPS via X-Forwarded-Proto header in production
- Extract isSecureCookie() utility to lib/auth/utils.ts
- Document COOKIE_SECURE in README and .env.example
Fixes #39
2026-01-23 15:26:24 -05:00
michaeltieso
3480888eaa
Initial commit
2025-12-01 14:49:17 +00:00
