jubnl b556c636eb fix: tighten 401 redirect allowlist and add reset-password paths ... Replaced loose includes()/startsWith() path checks with exact equality for static routes and strict prefix matching for dynamic-token routes. Added /forgot-password and /reset-password to the allowlist so the password-reset flow is usable without auth. Extracted isAuthPublicPath as a pure testable function with 14 unit tests covering regressions.		2026-04-20 21:55:15 +02:00
..
environment	fix(tests): restore native AbortController for undici fetch compatibility	2026-04-14 15:08:55 +02:00
helpers	feat(notifications): add ntfy as a first-class notification channel	2026-04-15 13:59:25 +02:00
integration	feat: add multi-day transport reservations with dedicated modal and route segmentation	2026-04-18 06:10:33 +02:00
unit	fix: tighten 401 redirect allowlist and add reset-password paths	2026-04-20 21:55:15 +02:00
setup.ts	add Emil-style UI polish pass (animations, shared components, feel)	2026-04-18 17:39:15 +02:00