Paddy
1de0cc6940
Fix two security/data-integrity gaps found in code review
...
- Voucher generation (wildcard + personalized) now validates every
eventId against the event_ticket_settings allow-list before minting
codes. Previously a direct API call bypassing the admin picker could
mint a fully-uncapped, no-deadline redeemable code for any Calendar
event, including non-concert ones.
- Redemption now checks the Calendar event isn't DELETED (validateVoucher
and redeemVoucher both). Previously a concert canceled/deleted after
codes were issued stayed silently redeemable. DRAFT events remain
eligible on purpose - vouchers are sometimes sent before a concert is
publicly announced.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-23 22:42:24 +02:00
Paddy
b6499eb7b3
Add Tickets domain for the voucher-based ticket shop
...
New domain mirroring the Feedback module's conventions: single-use voucher
codes (wildcard + personalized), redemption with race-safe capacity and
deadline enforcement, admin CRUD for vouchers/redemptions/event settings
with an audit trail, and reuse of the existing Calendar session auth.
Backend pieces:
- Tickets domain (public redeem flow, admin vouchers/redemptions/events)
- Calendar events.service.ts: add getEventById
- Mailer: attachment/HTML support, fix a shared-mutable-state race
- Per-event capacity/deadline/address settings, with an "address
required" option on top of "address collected"
- Email format validation on redeem and admin voucher/redemption input
- Docker Compose dev stack (MariaDB + seed data) for local testing
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-23 21:47:50 +02:00
Paddy
b05f6b9da0
Add Feedback domain module: public submission flow, admin CRUD, reporting ( #7 )
...
Jenkins Production Deployment
Co-authored-by: Patrick Müller <mail@pmueller.me >
Reviewed-on: #7
Co-authored-by: Patrick Mueller <patrick@mueller-patrick.tech >
Co-committed-by: Patrick Mueller <patrick@mueller-patrick.tech >
2026-08-23 09:39:02 +00:00
Paddy
e7621b8290
Merge pull request 'Add claude init file + refactor some security issues' ( #6 ) from feature/aiRefactoring20260502 into master
...
Jenkins Production Deployment
Reviewed-on: #6
2026-06-28 11:25:23 +00:00
Paddy
da85d1487c
Add claude init file + refactor some security issues
2026-05-02 12:22:03 +02:00
Paddy
dc65b49219
Add possibility to add birthdays + repeating events to the API
Jenkins Production Deployment
2025-09-07 18:15:15 +02:00
Paddy
9c45fb11ee
Add last modified information to event GET endpoints
Jenkins Production Deployment
2025-05-29 12:51:51 +02:00
Paddy
45dfc22c60
Add endpoint for getting upcoming event and adding swagger docs to all endpoints
Jenkins Production Deployment
2025-04-18 15:05:32 +02:00
Paddy
a38fb20e5a
Add endpoint that allows to move an event to a different calendar
Jenkins Production Deployment
2024-06-04 11:55:30 +02:00
Paddy
cb85e81d67
Add new "choir" calendar and add cascading functionality for calendars
Jenkins Production Deployment
2024-06-04 11:17:28 +02:00
Paddy
59fee19a76
Fix issue with sending mails
Jenkins Production Deployment
2023-12-30 23:11:50 +01:00
Paddy
a79e2186a2
Fix activation endpoint HTTP method
Jenkins Production Deployment
2023-12-30 22:55:40 +01:00
Paddy
8f93e1ab7d
Add password reset endpoints and mail service for user activation
Jenkins Production Deployment
2023-12-30 22:50:47 +01:00
Paddy
34a4a6664f
Fix bug where some fields were not sent back via the api
Jenkins Production Deployment
2023-05-15 20:50:50 +02:00
Paddy
76e6bbdbbf
Add event versioning capabilities
Jenkins Production Deployment
2023-05-15 20:28:42 +02:00
Paddy
5e84eaea70
Future-proof admin interface of the api, make the api fully capable of handling event status
2023-05-15 19:40:44 +02:00
Paddy
b8a68c2480
Add status column for events
Jenkins Production Deployment
2023-05-14 21:26:55 +02:00
Paddy
95983021ed
Rework user interface field API names
Jenkins Production Deployment
2023-05-14 21:09:34 +02:00
Paddy
02f7424b56
Upgrade to proper user management
2023-05-14 19:17:30 +02:00
Paddy
93c70b0e1d
#1 : Add possibility to create whole-day events
Jenkins Production Deployment
2022-12-28 12:15:01 +01:00
Paddy
d85f9a992b
#2 : Remove empty fields from generated ical
Jenkins Production Deployment
2022-12-28 11:34:25 +01:00
Paddy
fc071096d8
Fix URL null error when no url is given in event
Jenkins Production Deployment
2022-12-28 01:20:06 +01:00
Paddy
a34a5df5a3
Interface change to return eventId after POST call
Jenkins Production Deployment
2022-12-26 15:58:24 +01:00
Paddy
65a5e91ad1
Making createdBy field required
Jenkins Production Deployment
2022-12-25 21:50:21 +01:00
Paddy
6cb7f0d59b
Interface adjustments
Jenkins Production Deployment
2022-12-25 20:53:09 +01:00
Paddy
ccfa28877c
Adjust privileges mgmt
Jenkins Production Deployment
2022-12-25 18:24:18 +01:00
Paddy
a8f7189cb3
git add . is a difficult command to execute
Jenkins Production Deployment
2022-12-25 15:43:37 +01:00
Paddy
83c9d090e1
Add methods to insert, update and delete events
Jenkins Production Deployment
2022-12-25 15:38:13 +01:00
Paddy
0348d89121
Add credentials check and rework request structure
2022-12-25 13:49:38 +01:00
Paddy
ed9b7dafe0
Update mariadb library
Jenkins Production Deployment
2022-12-24 20:51:31 +01:00
Paddy
e76dc7405b
Change mariadb connector version
Jenkins Production Deployment
2022-12-24 20:48:54 +01:00
Paddy
9c6befc7b5
More debugging
Jenkins Production Deployment
2022-12-24 20:42:32 +01:00
Paddy
5dd3953542
Debug DB connection
Jenkins Production Deployment
2022-12-24 20:40:02 +01:00
Paddy
e08cd70eef
Proper error handling
Jenkins Production Deployment
2022-12-24 20:32:29 +01:00
Paddy
b00a37eb17
Add iCal converter
Jenkins Production Deployment
2022-12-24 17:44:28 +01:00
Paddy
96f04c6de4
Add JSON Endpoint for events
2022-12-24 15:03:37 +01:00
Paddy
3996e37682
Initial commit
2022-12-24 14:32:13 +01:00
Paddy
