Covers the security fixes that landed across both repos:
- auth.spec.ts: login persists nz-jwt cookie and getProfile succeeds;
password change bumps TokenVersion + revokes the old cookie so the
pre-change JWT can no longer auth (regression guard for the
keyId+session backend rewrite).
- cron-csrf.spec.ts: POST /api/v1/cron/:id/manual succeeds while GET
is no longer routable (regression guard for the cron CSRF fix).
- fm-csrf.spec.ts: POST /api/v1/file is reachable while GET is no
longer routable (regression guard for the FM CSRF fix).
- visibility.spec.ts: an anonymous caller cannot see a server-group
that contains zero guest-visible servers (regression guard for the
server-group leak fix).
Fixtures wrap the noisy login + cleanup boilerplate. tsconfig is
scoped to tests/e2e so the suite stays out of the production tsc
project graph.
Playwright config starts the Vite dev server (npm run dev) and
expects a backend reachable at the URL Vite proxies to. CI workflow
follow-up commit wires the backend up.
Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
Upgrade react-hook-form 7.63→7.71 to fix form.reset() race condition
that silently broke zod validation on subsequent submissions.
Reset form and public-note state (publicNoteObj/Raw/Mode/Errors)
from latest data when the edit dialog opens, preventing stale state
from a previous edit session.
* feat: enhance public notes functionality with flexible options
- Make public notes optional to prevent default values causing frontend issues
- Add dual editing modes: raw text editing and custom fields (avoid hardcoded schema)
- Set raw text mode as default, populate input on edit, submit raw text content always
- Add toggle switch: submit raw text when enabled, submit empty & hide controls when disabled
- New records default to disabled public notes; auto-expand on edit based on content
* chore: auto-fix linting and formatting issues
* feat: Add public annotation data structure and utility functions
Implemented Zod validation patterns, default values, parsing functions, and utility functions for public notes, and updated related internationalization text.
* chore: auto-fix linting and formatting issues
* refactor(server): Replace i18n implementation
Replace direct use of i18n.t with react-i18next's useTranslation hook to improve internationalization support.
* refactor(public-note): Optimize data model and validation logic
Removed the pruneEmpty function and simplified the date processing logic, making billingDataMod and planDataMod optional fields. Also optimized the validation logic to handle optional fields.
* chore: auto-fix linting and formatting issues
* fix zod validation & don't write empty values when parsing
* use raw mode if object contains unknown fields
* rename some features
* chore: Update dependency package versions
Upgrade multiple npm dependencies to their latest versions, including react, tailwindcss, and eslint. Ignore lock files.
* fix(server): Fix default value when bill amount is undefined
Changed undefined values for bill amount to the default value "0" to avoid potential null value errors.
---------
Co-authored-by: Guccen <171530509+Chillln@users.noreply.github.com>
Co-authored-by: uubulb <uub@suwako.de>
Upgraded `next-themes` from `^0.3.0` to `^0.4.6` to resolve compatibility issues with React 19.
The previous version (`0.3.0`) does not support React 19, which caused conflicts.
Changes:
- Updated `package.json` dependency: `"next-themes": "^0.4.6"`
- `bun.lockb` updated accordingly.
* feat: batch set server config
* make every field optional
* chore: auto-fix linting and formatting issues
* update
* [WIP] improve batch edit ux
* chore: auto-fix linting and formatting issues
* fix: window.DisableAnimatedMan as boolean
* chore: auto-fix linting and formatting issues
* feat: user role
* feat: use user agent_secret
* feat: hide setting when user role is not admin
* feat: new waf api
* chore: auto-fix linting and formatting issues
* fix: admin settings page
* feat: online-user setting
* fix: pagination
---------
Co-authored-by: hamster1963 <hamster1963@users.noreply.github.com>
naibaandcloudcode
UUBulb
Moraxyc
仓鼠andhamster1963
Colin
uubulb