Paddy
17ca6399e0
Add Feedback domain module: public submission flow, admin CRUD, reporting
...
New /feedback API domain backed by its own FEEDBACK_DB, mirroring the
Calendar domain's router -> service -> DB pool layering:
- Public endpoints (no auth): eligible-events listing, event config,
submission with honeypot + rate limiting (in-memory + DB backstop).
- Admin endpoints (session-header auth, reusing Calendar's users/sessions
via a swappable feedback.auth.ts boundary): events/songs/questions CRUD,
bulk reorder/assignment, aggregated reporting, CSV export.
- Schema in sql/feedback/001_init.sql (8 tables), applied and verified
against the real FEEDBACK_DB.
- 64 Jest tests covering validation, auth, rate limiting, CSV escaping,
and report aggregation (pure functions, no DB needed).
Includes fixes from a security review: path traversal defense doesn't
apply here (that's the frontend proxy, separate repo), but the
rate-limiter cluster does - recordSubmission now counts every processed
request (not just successful ones), the in-memory Map evicts empty
entries instead of growing unbounded, FEEDBACK_IP_SALT is required at
boot instead of silently degrading to unsalted hashing, and submission
answer/rating arrays are capped and de-duplicated to bound insert
amplification.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-05 23:32:22 +02:00
Paddy
e7621b8290
Merge pull request 'Add claude init file + refactor some security issues' ( #6 ) from feature/aiRefactoring20260502 into master
...
Jenkins Production Deployment
Reviewed-on: #6
2026-06-28 11:25:23 +00:00
da85d1487c
Add claude init file + refactor some security issues
2026-05-02 12:22:03 +02:00
Paddy
dc65b49219
Add possibility to add birthdays + repeating events to the API
Jenkins Production Deployment
2025-09-07 18:15:15 +02:00
Paddy
9c45fb11ee
Add last modified information to event GET endpoints
Jenkins Production Deployment
2025-05-29 12:51:51 +02:00
Paddy
45dfc22c60
Add endpoint for getting upcoming event and adding swagger docs to all endpoints
Jenkins Production Deployment
2025-04-18 15:05:32 +02:00
Paddy
a38fb20e5a
Add endpoint that allows to move an event to a different calendar
Jenkins Production Deployment
2024-06-04 11:55:30 +02:00
Paddy
cb85e81d67
Add new "choir" calendar and add cascading functionality for calendars
Jenkins Production Deployment
2024-06-04 11:17:28 +02:00
Paddy
59fee19a76
Fix issue with sending mails
Jenkins Production Deployment
2023-12-30 23:11:50 +01:00
Paddy
a79e2186a2
Fix activation endpoint HTTP method
Jenkins Production Deployment
2023-12-30 22:55:40 +01:00
Paddy
8f93e1ab7d
Add password reset endpoints and mail service for user activation
Jenkins Production Deployment
2023-12-30 22:50:47 +01:00
Paddy
34a4a6664f
Fix bug where some fields were not sent back via the api
Jenkins Production Deployment
2023-05-15 20:50:50 +02:00
Paddy
76e6bbdbbf
Add event versioning capabilities
Jenkins Production Deployment
2023-05-15 20:28:42 +02:00
Paddy
5e84eaea70
Future-proof admin interface of the api, make the api fully capable of handling event status
2023-05-15 19:40:44 +02:00
Paddy
b8a68c2480
Add status column for events
Jenkins Production Deployment
2023-05-14 21:26:55 +02:00
Paddy
95983021ed
Rework user interface field API names
Jenkins Production Deployment
2023-05-14 21:09:34 +02:00
Paddy
02f7424b56
Upgrade to proper user management
2023-05-14 19:17:30 +02:00
Paddy
93c70b0e1d
#1 : Add possibility to create whole-day events
Jenkins Production Deployment
2022-12-28 12:15:01 +01:00
Paddy
d85f9a992b
#2 : Remove empty fields from generated ical
Jenkins Production Deployment
2022-12-28 11:34:25 +01:00
Paddy
fc071096d8
Fix URL null error when no url is given in event
Jenkins Production Deployment
2022-12-28 01:20:06 +01:00
Paddy
a34a5df5a3
Interface change to return eventId after POST call
Jenkins Production Deployment
2022-12-26 15:58:24 +01:00
Paddy
65a5e91ad1
Making createdBy field required
Jenkins Production Deployment
2022-12-25 21:50:21 +01:00
Paddy
6cb7f0d59b
Interface adjustments
Jenkins Production Deployment
2022-12-25 20:53:09 +01:00
Paddy
ccfa28877c
Adjust privileges mgmt
Jenkins Production Deployment
2022-12-25 18:24:18 +01:00
Paddy
a8f7189cb3
git add . is a difficult command to execute
Jenkins Production Deployment
2022-12-25 15:43:37 +01:00
Paddy
83c9d090e1
Add methods to insert, update and delete events
Jenkins Production Deployment
2022-12-25 15:38:13 +01:00
Paddy
0348d89121
Add credentials check and rework request structure
2022-12-25 13:49:38 +01:00
Paddy
ed9b7dafe0
Update mariadb library
Jenkins Production Deployment
2022-12-24 20:51:31 +01:00
Paddy
e76dc7405b
Change mariadb connector version
Jenkins Production Deployment
2022-12-24 20:48:54 +01:00
Paddy
9c6befc7b5
More debugging
Jenkins Production Deployment
2022-12-24 20:42:32 +01:00
Paddy
5dd3953542
Debug DB connection
Jenkins Production Deployment
2022-12-24 20:40:02 +01:00
Paddy
e08cd70eef
Proper error handling
Jenkins Production Deployment
2022-12-24 20:32:29 +01:00
Paddy
b00a37eb17
Add iCal converter
Jenkins Production Deployment
2022-12-24 17:44:28 +01:00
Paddy
96f04c6de4
Add JSON Endpoint for events
2022-12-24 15:03:37 +01:00
Paddy
3996e37682
Initial commit
2022-12-24 14:32:13 +01:00
Paddy
Patrick Müller