6 Commits

Author	SHA1	Message	Date
belisards	844951c832	feat(claim): quantity-aware claims via item_claims; per-guest unclaim	2026-05-03 16:22:22 -03:00
belisards	32f9403bd8	feat(api): admin guests CRUD endpoints	2026-05-03 16:21:26 -03:00
belisards	7b2e2cc3c5	feat(auth): replace login/refresh/me with /api/auth/session	2026-05-03 16:20:37 -03:00
Michael T	ee884ccdf2	fix(api): use synchronous transaction for wishlist reorder ... better-sqlite3 doesn't support async transactions. Removed async/await and used synchronous .run() and .all() methods instead. Fixes #38	2026-01-23 15:29:16 -05:00
Michael T	30c661a364	fix(auth): resolve cookie authentication failure over HTTP ... Cookies were set with secure flag based solely on NODE_ENV, causing 401 errors when accessing over HTTP with NODE_ENV=production. - Add COOKIE_SECURE env var for explicit control - Auto-detect HTTPS via X-Forwarded-Proto header in production - Extract isSecureCookie() utility to lib/auth/utils.ts - Document COOKIE_SECURE in README and .env.example Fixes #39	2026-01-23 15:26:24 -05:00
michaeltieso	3480888eaa	Initial commit	2025-12-01 14:49:17 +00:00