Maurice 4ddfa92c14 security: require auth for file and photo uploads ... /uploads/files/ and /uploads/photos/ now require a valid Bearer token. Covers and avatars remain public (needed for shared pages and profiles). Prevents unauthenticated access to uploaded documents and trip photos.		2026-03-30 20:51:38 +02:00
..
src	security: require auth for file and photo uploads	2026-03-30 20:51:38 +02:00
.env.example	harden runtime config and automate first-run permissions	2026-03-30 13:19:01 -03:00
package-lock.json	feat: email notifications, webhook support, ICS export — closes #110	2026-03-30 17:07:33 +02:00
package.json	feat: email notifications, webhook support, ICS export — closes #110	2026-03-30 17:07:33 +02:00
reset-admin.js	Stabilize core: better-sqlite3, versioned migrations, graceful shutdown	2026-03-22 17:52:24 +01:00
tsconfig.json	fix: resolve all TypeScript errors via proper Express 5 typed route params	2026-03-28 20:13:24 +00:00