jubnl da70388f4b fix(journey): resolve Immich photos on public share by matching trek_photos.id ...

validateShareTokenForPhoto was querying journey_photos by jp.id but the
public page sends p.photo_id (trek_photos.id) in the URL. In a fresh
database the IDs coincidentally match, masking the bug. In production
instances with many Immich-synced photos the trek_photos autoincrement
is far ahead of journey_photos, causing a 404 for every Immich photo
on the public share page.

Fix: change the lookup to jp.photo_id = ? so validation is keyed on
trek_photos.id, which is what the client sends and what streamPhoto
needs. Updated the test helper to return trekId and added a regression
test that pre-populates trek_photos to produce diverging IDs. Closes #675.

2026-04-16 15:37:24 +02:00

..

public

chore(CRLF): normalize index.html line endings to LF

2026-04-05 04:35:17 +02:00

scripts

feat: add encryption key migration script and document it in README

2026-04-01 09:35:32 +02:00

src

fix(journey): resolve Immich photos on public share by matching trek_photos.id

2026-04-16 15:37:24 +02:00

tests

fix(journey): resolve Immich photos on public share by matching trek_photos.id

2026-04-16 15:37:24 +02:00

.env.example

feat(login): add language dropdown, browser auto-detection and configurable default

2026-04-12 20:03:57 -03:00

package-lock.json

feat(notices): add system notice infrastructure

2026-04-16 14:36:33 +02:00

package.json

feat(notices): add system notice infrastructure

2026-04-16 14:36:33 +02:00

reset-admin.js

Stabilize core: better-sqlite3, versioned migrations, graceful shutdown

2026-03-22 17:52:24 +01:00

tsconfig.json

some fixes

2026-03-30 06:59:24 +02:00

vitest.config.ts

refactor(mcp): replace direct DB access with service layer calls

2026-04-04 18:12:53 +02:00