k1nq/TREK
1
0
Fork 0
mirror of https://github.com/mauriceboe/TREK.git synced 2026-06-19 13:21:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e308204808 feat: undo button for trip planner Luca 2026-04-01 18:20:14 +02:00
  • 411d5408c1 fix: place inspector too narrow at intermediate window widths (#272) Maurice 2026-04-01 17:58:57 +02:00
  • 45684d9e44 Merge pull request #257 from jubnl/dev Maurice 2026-04-01 17:42:43 +02:00
  • 0ebcff9504 Conflict resolution jubnl 2026-04-01 17:40:45 +02:00
  • edafe01387 Merge branch 'dev' into dev Julien G. 2026-04-01 17:30:31 +02:00
  • 16277a3811 security: fix missing trip access checks on Immich routes (GHSA-pcr3-6647-jh72) security: require auth for uploaded photos (GHSA-wxx3-84fc-mrx2) Maurice 2026-04-01 15:46:08 +02:00
  • ef5b381f8e feat: collapse days hides map markers, Immich test-before-save (#216) Maurice 2026-04-01 15:30:59 +02:00
  • ef9880a2a5 feat: Immich album linking with auto-sync (#206) Maurice 2026-04-01 15:21:20 +02:00
  • 95cb81b0e5 perf: major trip planner performance overhaul (#218) Maurice 2026-04-01 14:56:01 +02:00
  • 7d0ae631b8 fix: mobile place editing and detail view (#269) Maurice 2026-04-01 12:38:44 +02:00
  • 5c04074d54 fix: allow unauthenticated SMTP by saving empty user/pass fields (#265) Maurice 2026-04-01 12:20:03 +02:00
  • e89ba2ecfc fix: add referrerPolicy to TileLayer to fix OSM tile blocking (#264) Maurice 2026-04-01 12:17:53 +02:00
  • 4ebf9c5f11 feat: add expense date and CSV export to budget Maurice 2026-04-01 12:16:11 +02:00
  • add0b17e04 feat(auth): migrate JWT storage from localStorage to httpOnly cookies jubnl 2026-04-01 11:02:45 +02:00
  • 60906cf1d1 fix: hide MCP tokens tab when addon inactive, move permissions to users tab Maurice 2026-04-01 10:39:43 +02:00
  • 9292acb979 Merge branch 'dev' into dev Julien G. 2026-04-01 10:27:51 +02:00
  • be57b7130f feat: render markdown in place descriptions, notes and reservations Maurice 2026-04-01 10:19:59 +02:00
  • b88a8fcbb5 fix: unify password validation error to show all requirements at once jubnl 2026-04-01 10:14:35 +02:00
  • 040840917c feat: add Google Maps list import Maurice 2026-04-01 10:13:35 +02:00
  • 44e5f07f59 fix: persist encryption key to disk regardless of resolution source jubnl 2026-04-01 10:03:11 +02:00
  • c9e61859ce chore(helm): update ENCRYPTION_KEY docs to reflect automatic fallback jubnl 2026-04-01 09:49:57 +02:00
  • 862f59b77a chore: update docker-compose ENCRYPTION_KEY comment to match new behaviour jubnl 2026-04-01 09:48:14 +02:00
  • 871bfd7dfd fix: make ENCRYPTION_KEY optional with backwards-compatible fallback jubnl 2026-04-01 09:47:31 +02:00
  • 4d596f2ff9 feat: add encryption key migration script and document it in README jubnl 2026-04-01 09:35:32 +02:00
  • 8c85ea3644 fix: restrict trip listing and access to own/shared trips only (#250) Maurice 2026-04-01 09:29:28 +02:00
  • 19350fbc3e fix: point upgraders to ./data/.jwt_secret in ENCRYPTION_KEY error and docs jubnl 2026-04-01 08:43:10 +02:00
  • 358afd2428 fix: require ENCRYPTION_KEY at startup instead of auto-generating jubnl 2026-04-01 08:38:02 +02:00
  • 7a314a92b1 fix: add SSRF protection for link preview and Immich URL jubnl 2026-04-01 07:53:46 +02:00
  • e03505dca2 fix: enforce consistent password policy across all auth flows jubnl 2026-04-01 07:02:53 +02:00
  • ce8d498f2d fix: add independent rate limiter for MFA verification endpoints jubnl 2026-04-01 06:47:20 +02:00
  • b109c1340a fix: prevent ICS header injection in calendar export jubnl 2026-04-01 06:43:01 +02:00
  • e10f6bf9af fix: remove JWT_SECRET env var — server manages it exclusively jubnl 2026-04-01 06:38:38 +02:00
  • 6f5550dc50 fix: decouple at-rest encryption from JWT_SECRET, add JWT rotation jubnl 2026-04-01 06:31:45 +02:00
  • dfdd473eca fix: validate uploaded backup DB before restore jubnl 2026-04-01 05:54:03 +02:00
  • b515880adb fix: encrypt Immich API key at rest using AES-256-GCM jubnl 2026-04-01 05:50:28 +02:00
  • 78695b4e03 fix: replace JWT tokens in URL query params with short-lived ephemeral tokens jubnl 2026-04-01 05:42:27 +02:00
  • 0ee53e7b38 fix: prevent OIDC redirect URI construction from untrusted X-Forwarded-Host jubnl 2026-04-01 04:36:27 +02:00
  • 1b28bd96d4 fix: encrypt SMTP password at rest using AES-256-GCM jubnl 2026-04-01 04:33:17 +02:00
  • bba50f038b fix: encrypt OIDC client secret at rest using AES-256-GCM jubnl 2026-04-01 04:27:50 +02:00
  • 701a8ab03a fix: route db helper functions through the null-safe proxy jubnl 2026-04-01 04:22:57 +02:00
  • ccb5f9df1f fix: wrap each migration in a transaction and surface swallowed errors jubnl 2026-04-01 04:19:52 +02:00
  • c9341eda3f fix: remove RCE vector from admin update endpoint. jubnl 2026-04-01 04:09:09 +02:00
  • fb2e8d8209 fix: keep marker tooltip visible on touch devices when selected Maurice 2026-04-01 00:11:06 +02:00
  • 27fb9246e6 Merge pull request #238 from slashwarm/feat/permissions-admin-panel Maurice 2026-04-01 00:05:14 +02:00
  • 9a2c7c5db6 fix: address PR review feedback Gérnyi Márk 2026-03-31 23:56:19 +02:00
  • d1ad5da919 fix: tighten trip_edit and member_manage defaults to trip_owner Gérnyi Márk 2026-03-31 23:52:29 +02:00
  • 1fbc19ad4f fix: add missing permission checks to file routes and map context menu Gérnyi Márk 2026-03-31 23:45:11 +02:00
  • 23edfe3dfc fix: harden permissions system after code review Gérnyi Márk 2026-03-31 23:33:27 +02:00
  • 1ff8546484 fix: i18n chat reply/delete titles, gate collab category settings Gérnyi Márk 2026-03-31 23:15:43 +02:00
  • 6d18d5ed2d fix: gate collab notes category settings button with collab_edit Gérnyi Márk 2026-03-31 23:05:51 +02:00
  • 6d5067247c refactor: remove dead isAdmin prop from dashboard cards Gérnyi Márk 2026-03-31 23:02:43 +02:00
  • 5e05bcd0db Revert "fix: change trip_edit to trip_owner" Gérnyi Márk 2026-03-31 22:35:00 +02:00
  • 5f71b85c06 feat: add client-side permission gating to all write-action UIs Gérnyi Márk 2026-03-31 22:06:52 +02:00
  • d74133745a chore: update package-lock.json and .gitignore Gérnyi Márk 2026-03-31 21:57:17 +02:00
  • eee2bbe47a fix: change trip_edit to trip_owner Gérnyi Márk 2026-03-31 21:47:30 +02:00
  • c1bce755ca refactor: dedupe database requests Gérnyi Márk 2026-03-31 21:47:10 +02:00
  • 015be3d53a fix: incorrect hook order Gérnyi Márk 2026-03-31 20:53:08 +02:00
  • 7d3b37a2a3 feat: add configurable permissions system with admin panel Gérnyi Márk 2026-03-31 20:30:12 +02:00
  • ff1c1ed56a Merge branch 'dev' of https://github.com/mauriceboe/TREK into dev Maurice 2026-03-31 23:18:12 +02:00
  • d5674e9a11 fix: archive restore/delete buttons not visible in dark mode Maurice 2026-03-31 23:18:04 +02:00
  • 7eabe65bcf Merge pull request #240 from Summerfeeling/feat/more-currencies Maurice 2026-03-31 23:12:32 +02:00
  • 3444e3f446 Merge branch 'perf-test' of https://github.com/jubnl/TREK into dev Maurice 2026-03-31 23:10:02 +02:00
  • 9e3ac1e490 fix: increase max trip duration from 90 to 365 days Maurice 2026-03-31 22:58:27 +02:00
  • c38e70e244 fix: toggle switches not reflecting state in admin settings Maurice 2026-03-31 22:49:31 +02:00
  • ce7215341f fix: 12h time format input and display in bookings Maurice 2026-03-31 22:40:59 +02:00
  • 4733955531 fix: render Lucide category icons on map markers instead of text/emoji Maurice 2026-03-31 22:35:43 +02:00
  • 36267de117 fix: bag modal cut off on small screens Maurice 2026-03-31 22:23:44 +02:00
  • cd13399da5 fix: show selected map template in settings dropdown Maurice 2026-03-31 22:18:42 +02:00
  • 36cd2feca5 fix: use Nominatim reverse geocoding for accurate country detection in atlas Maurice 2026-03-31 21:58:20 +02:00
  • fbe3b5b17e Merge pull request #225 from andreibrebene/improvements/various-improvements Maurice 2026-03-31 21:40:26 +02:00
  • 10107ecf31 fix: require auth for file downloads, localize atlas search, use flag images Maurice 2026-03-31 21:38:16 +02:00
  • 94d698e39f docs: simplify README docker-compose example to essential env vars only Andrei Brebene 2026-03-31 17:00:15 +03:00
  • 6c88a01123 docs: document all env vars and remove SMTP/webhook from docker config Andrei Brebene 2026-03-31 16:59:11 +03:00
  • 75af89de30 docs: remove SMTP and webhook env vars (configured via Admin UI only) Andrei Brebene 2026-03-31 16:48:56 +03:00
  • ed8518aca4 docs: document all environment variables in docker-compose, .env.example, and README Andrei Brebene 2026-03-31 16:45:20 +03:00
  • 7522f396e7 feat: configurable trip reminders, admin full access, and enhanced audit logging Andrei Brebene 2026-03-31 16:42:37 +03:00
  • 9b2f083e4b feat: notifications, audit logging, and admin improvements Andrei Brebene 2026-03-31 15:01:33 +03:00
  • 9a949d7391 Performance on trip planner (Maybe ?) jubnl 2026-03-31 21:13:29 +02:00
  • 13904fb702 feat: added all supported currencies from exchangerate-api (#229) Summerfeeling | Timo 2026-03-31 21:04:59 +02:00
  • f7160e6dec Merge pull request #179 from shanelord01/audit/remediation-clean Maurice 2026-03-31 20:53:48 +02:00
  • 1983691950 Merge branch 'feat/add-searchbar-in-atlas' of https://github.com/Akashic101/NOMAD into dev Maurice 2026-03-31 20:29:23 +02:00
  • 6866644d0c Merge pull request #189 from M-Enderle/feat/gpx-full-route-import Maurice 2026-03-31 20:17:22 +02:00
  • b120aabaa3 Merge pull request #191 from M-Enderle/feat/mcp-improvements Maurice 2026-03-31 20:16:04 +02:00
  • 1d442c1d7a Merge pull request #182 from BKSalman/mobile-fixes Maurice 2026-03-31 20:14:30 +02:00
  • 9a0294360c Merge pull request #181 from BKSalman/accom-fix Maurice 2026-03-31 20:10:42 +02:00
  • 9de0c5b051 Merge remote-tracking branch 'origin/dev' into asteriskyg/main Maurice 2026-03-31 20:08:42 +02:00
  • 9e9b86f1b4 Merge branch 'fix/encrypt-api-keys' of https://github.com/Akashic101/NOMAD into dev Maurice 2026-03-31 20:03:55 +02:00
  • 8ff5ec486f Merge branch 'main' into feat/add-searchbar-in-atlas David Moll 2026-03-31 12:31:14 +02:00
  • 5576339bcc feat(atlas): add searchbar David Moll 2026-03-31 12:27:13 +02:00
  • e668e80f1c feat: add search_place, list_categories tools + fix opening hours in MCP Moritz Enderle 2026-03-31 10:38:29 +02:00
  • 3aaa6e916b feat: adds better gpx track views Moritz Enderle 2026-03-31 00:10:33 +02:00
  • ad329eddb9 Merge pull request #176 from jubnl/main Maurice 2026-03-31 10:00:37 +02:00
  • 990e804bd3 fix(server): encrypt api keys David Moll 2026-03-31 09:00:35 +02:00
  • 299e26bebe make day plan side bar icons more readable Salman Abuhaimed 2026-03-31 06:13:31 +03:00
  • 96b6d7d81f fix: note modal hidden behind mobile sidebar due to z-index Salman Abuhaimed 2026-03-31 06:01:41 +03:00
  • 27d5c3400c fix: update dayAccommodations state after create/edit/delete Salman Abuhaimed 2026-03-31 05:51:09 +03:00
  • bb9c0c9b68 fix: day details on mobile not showing Salman Abuhaimed 2026-03-31 05:44:59 +03:00
  • 483190e7c1 fix: XSS in GitHubPanel markdown renderer and RouteCalculator profile bug Claude 2026-03-30 23:42:40 +00:00
  • c89ff8b551 fix: critical Immich SSRF and API key exposure vulnerabilities Claude 2026-03-30 23:39:42 +00:00
  • 63232e56a3 fix: prevent OIDC token data leaking to logs, update audit findings Claude 2026-03-30 23:36:29 +00:00