Maurice 328d1c9468 fix(auth): keep the last admin when OIDC claims would demote it (#1274) ... On OIDC-only instances the bootstrap admin (first SSO user) rarely carries the configured admin claim, so a forced re-login — e.g. after a JWT-secret rotation — re-derived its role purely from claims and demoted it to user, locking the instance out with no recovery. The OIDC login role sync now skips a downgrade that would strip the last remaining admin, and the admin user-update endpoint guards the same case.		2026-06-23 21:23:39 +02:00
..
db	v3.1.1 bug fixes (#1228)	2026-06-18 20:13:30 +02:00
demo	v2.6.2 — TREK Rebrand, OSM Enrichment, File Management, Hotel Bookings & Bug Fixes	2026-03-28 16:38:08 +01:00
mcp	fix(days): align note time limit to 250 and keep toasts above modal blur (#1252)	2026-06-23 21:23:39 +02:00
middleware	fix(security): allow same-origin PDF previews under CSP (#1253)	2026-06-23 21:23:39 +02:00
nest	fix(days): align note time limit to 250 and keep toasts above modal blur (#1252)	2026-06-23 21:23:39 +02:00
services	fix(auth): keep the last admin when OIDC claims would demote it (#1274)	2026-06-23 21:23:39 +02:00
systemNotices	Bug fixes - May 2nd 2026 (#941)	2026-05-03 17:39:45 +02:00
typings	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
utils	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
addons.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
bootstrap.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
config.ts	v3.1.1 bug fixes (#1228)	2026-06-18 20:13:30 +02:00
index.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
scheduler.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
types.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00
websocket.ts	Release 3.1.0 (#1185)	2026-06-16 22:22:45 +02:00